Privacy Policy

This Privacy Policy explains what information 8Bit Technologies ("8Bit", "we", "us") handles, why, and what choices you have. It covers our public website at 8bittechnologies.com and Orbit, the work-management application that our staff and our clients use to plan, review and approve content, including Orbit's connection to Facebook and Instagram through Meta.

1. Who we are

8Bit Technologies, BE 61, Salt Lake Rd, BE Block, Sector 1, Kolkata, Bidhannagar, West Bengal 700064.
Email: support@8bittechnologies.com · Phone: 092331 11777

2. Information we handle

Website visitors

• Technical information that web servers record by default: IP address, browser and device type, the pages requested, and the date and time. We use it to operate and secure the website.
• Anything you choose to send us, for example your name, email address and message if you email or phone us.

Orbit accounts

• Name, email address, role, account status and time zone for staff and client users. Passwords are stored only as salted hashes, never in readable form.
• Sign-in session data, and a record of important account and work actions (who did what, and when).

Client and work information

• Client business names and codes, the people linked to each client, and the work being done for them.
• Social media drafts: captions, hashtags, scheduling dates, creative files (images and video), approval requests and decisions, and comments.

Google Drive and Google Sheets

Orbit can read, read-only, the Google Drive folders and the content-planning spreadsheet that have been shared with a Google service account we operate. It reads file names, folder structure, file contents needed to import creative material, and spreadsheet rows. Orbit does not create, change or delete anything in Google Drive or Sheets, and it stores references (such as file names and IDs) and the files that are imported into a work item.

Facebook and Instagram (Meta)

An authorised 8Bit administrator can connect one 8Bit agency Meta account to Orbit by signing in with Facebook. When this is done, Orbit receives and stores:

• the name and Meta ID of the Facebook account that authorised the connection, and which permissions were granted;
• the Facebook Pages that the account is able to manage: Page ID, Page name, and the tasks the account may perform on each Page;
• for each Page, an access token that lets Orbit act on that Page;
• the Instagram professional account linked to a Page, if there is one: its ID and username;
• which Orbit client each Page belongs to (a mapping chosen by an 8Bit administrator); and
• when content is published through the integration, the identifiers and status that Meta returns for that post.

The integration does not read private messages, and it does not collect the personal information of a Page's followers, fans, commenters or customers. Client users never sign in to Meta through Orbit.

3. Why we use Meta data

We use the Meta permissions that are granted to Orbit only for the following purposes:

• pages_show_list and business_management: to list the Facebook Pages that 8Bit's account manages, including Pages that are managed through a Meta Business portfolio, so that each Page can be matched to the right client.
• pages_read_engagement: to read the basic Page details Meta requires in order to identify a Page and publish to it.
• instagram_basic: to identify the Instagram professional account linked to a Page (its ID and username).
• pages_manage_posts and instagram_content_publish: to publish to a client's Facebook Page and linked Instagram account content that has been prepared, reviewed and approved in Orbit. Content is published only to the Page and Instagram account that an administrator has mapped to that client.

We use information we receive from Meta only to provide these features. We do not sell it, we do not use it for advertising or for profiling people, and we do not give it to data brokers. Our use of Meta data follows Meta's Platform Terms.

4. Other ways we use information

• To run Orbit: sign-in, roles and permissions, work planning, approvals, comments and notifications.
• To keep Orbit and the website secure, detect misuse and fix problems.
• To communicate with you about your account, your work, and your requests.
• To meet legal obligations and to protect our rights.

5. How access tokens are protected

• Meta access tokens are encrypted before they are stored, using the application's encryption key.
• Tokens are not shown in Orbit's screens, are not written into activity records or logs, and are not placed in web addresses.
• Tokens are sent only to Meta, over an encrypted (HTTPS) connection.
• When the Meta connection is disconnected in Orbit, or a Page stops being accessible, the stored tokens are removed.

6. Cookies

Our website and Orbit use only essential cookies: a session cookie that keeps a signed-in user signed in, and a security cookie that protects forms from forgery. They are needed for the application to work. We do not use advertising cookies or third-party analytics on this website.

7. Who we share information with

• Within Orbit: staff see information according to their role. A client user can see only their own client's work, never another client's.
• Meta and Google: information is exchanged with Meta when you connect or use the Meta integration, and with Google when Orbit reads the Drive folders and spreadsheet shared with us. Each of them handles that information under its own terms and privacy policy.
• Service providers: companies that provide the infrastructure we rely on, such as hosting, database and email delivery, who process information on our behalf to run the service.
• Legal and safety: where the law requires it, or to protect rights, safety and security.

We do not sell personal information.

8. How long we keep information

We keep information for as long as it is needed to provide our services, to keep an accurate record of work and approvals, and to meet legal and accounting obligations. We do not apply a single fixed period to everything. Meta tokens are removed on disconnection as described above. Page and Instagram identifiers and the client mapping may be kept as a historical record unless you ask us to delete them (see our Data Deletion page).

9. Security

We use access controls that separate staff from client users and limit what each role can see or do, encrypted connections, hashed passwords, encrypted integration secrets and an audit trail of important actions. No system is completely secure, so we cannot guarantee absolute security.

10. Your choices and rights

• You can ask us for access to the personal information we hold about you, or ask us to correct it.
• You can ask us to delete information, including information held through the Meta integration. See Data Deletion for how.
• You can stop Orbit's access to your Meta account at any time by removing the app in your Facebook settings under Settings and privacy → Settings → Business integrations, or by asking us to disconnect it.
• You can ask questions or make a complaint by contacting us as set out below.

Some information has to be kept where the law requires it or where it is needed to protect legal rights, and we will tell you if that applies to your request.

11. Children

Our website and Orbit are for businesses and are not directed at children. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy as our services change. The date above shows when it was last revised. If a change is significant we will make that clear on this page.

13. Contact us

8Bit Technologies
BE 61, Salt Lake Rd, BE Block, Sector 1, Kolkata, Bidhannagar, West Bengal 700064
Email: support@8bittechnologies.com
Phone: 092331 11777