Security and Privacy

We take data protection seriously, operating exclusively through official channels and maintaining transparency in everything we do.

Meta Tech Provider

Orbit is a verified Meta Tech Provider with an approved business verification. We operate exclusively through the official Instagram and WhatsApp Cloud APIs — never through unofficial methods that put your account at risk of bans.

Encryption

All traffic travels under TLS (HTTPS) end-to-end. Your account access tokens are encrypted with AES-256-GCM before being stored. Not even the Orbit interface displays these tokens.

Strict Isolation

Each workspace is isolated by security rules in the database: one client never accesses another's data, even in the event of an application error. Sessions authenticated by httpOnly cookies.

Enterprise Infrastructure

We run on Google Cloud / Firebase, whose infrastructure maintains the industry's top security certifications. Continuous and automatic backups.

Total User Control

Disconnect a channel whenever you want and the token is instantly deleted. Contacts can reply "STOP" to stop receiving messages. Human support can take over the conversation at any time.

What we DO NOT do with your data

We DO NOT sell, rent, or trade your data.

We DO NOT use your data for advertising or targeting.

We DO NOT use your conversation content to train AI models.

Data obtained from APIs is used exclusively to operate Orbit for your benefit.

* As required by Meta Platform Terms and applicable laws (GDPR, LGPD). Data Protection Officer (DPO): support.orbit@expertbr.com

Security FAQs

Orbit's entire infrastructure is operated on the Google Cloud Platform (Firebase).

Orbit needs to receive the content of the conversations to display them in your inbox and allow the AI to respond, but we do not use your conversations for anything other than operating the service for you.

We operate exclusively through the official Instagram and WhatsApp Cloud APIs. We do not use unofficial methods (such as reading a QR Code emulating WhatsApp Web) that violate Meta's rules and cause bans.

You can request total deletion at any time through our Data Deletion page. Everything will be irreversibly removed within 7 business days.

No. The content of your conversations is never used to train our AI models or third-party models.

Learn more about our policies

Transparency is our foundation. Access our complete legal documents for all the details on how we operate.