Privacy Policy

This Privacy Policy explains how Orion Studios collects, uses, and shares information when you visit www.orionstudios.dev, submit a form, book a call, request a quote, use an Orion Studios CMS reporting or Facebook Page connection, or otherwise communicate with us through the site.

If we enter into a separate client agreement with you, that agreement may include additional project-specific privacy, security, or confidentiality terms that also apply to the work we do together.

Basic website analytics counts page views and bounded engagement without an optional visitor cookie. If you choose Accept, we also use a first-party visitor identifier and Google Analytics. Closing the cookie banner without accepting deletes the optional first-party identifier and disables Google Analytics on this site. You can change your choice using Analytics choices.

We may rely on third-party providers for hosting, analytics, communications, scheduling, and payment processing. Those providers may include services such as Vercel, Google Analytics, Google Workspace, Resend, and Stripe. They only receive the information reasonably needed to perform their role and operate under their own terms and privacy practices.

The first-party choice and visitor cookies expire after 90 days without renewing when read. Global Privacy Control and Do Not Track decline optional analytics. Raw CMS analytics expires after 90 days. Counts-only daily summaries may be retained longer. Contact us about analytics deletion requests.

Clients may choose to connect an authorized Google account to Orion Studios CMS reporting. With that authorization, the service may access Google Search Console search performance data and Google Business Profile performance data, along with the account, property, and location identifiers needed to request those reports.

Google user data is used only to display reporting inside the client's Studio, prepare client-authorized care reports, and supply labeled aggregate metrics to Orion's authenticated CRM fleet view. Labeled aggregates may appear in care reports delivered to the client. Raw Google records and OAuth tokens do not leave the client site database.

Orion Studios does not use Google user data for advertising or sell it. We share it only with the client through authorized reporting, with Orion staff through the authenticated CRM fleet view, and with service providers needed to host, secure, and operate the reporting service.

The connection stores an encrypted OAuth refresh token in the client site database. Imported Google reporting data, including daily query, page, and profile records and their performance metrics, stays in that database and follows the site's retention practices. Disconnecting the integration deletes the stored refresh token and stops future synchronization. Clients can also revoke access from their Google Account.

Google provides one broad Business Profile management scope for this connection. The Orion Studios reporting integration limits its use to read-only account, location, and performance requests and does not edit Business Profile listings.

A Studio administrator can connect a Facebook account and choose a Page they manage. We read eligible Page names and identifiers to support that choice and store the selected Page access token encrypted in the service database. We also keep the connecting administrator identifier, permission records, connection status, and sharing history.

When you choose to share an article, we send its published title and website link to Meta for publication on the selected Page. Automatic sharing requires a separate choice and applies to newly published articles. We read Page posts to verify delivery and avoid duplicate posts. We do not use this connection to collect follower profiles, sell Facebook data, or generate advertising audiences.

Disconnect Page in Studio, under Blog automation Settings, removes the stored Page credential and stops future automatic sharing. You can also remove Orion Studios CMS through Facebook business integration settings. Disconnecting does not delete posts already published on Facebook, and a post already being sent may still finish.

To request deletion of Facebook connection data and sharing history, email contact@orionstudios.dev with your website and Page name. Do not send passwords or access tokens. We verify that you control the connection before processing the request. Unsettled publication requests must finish or be resolved before their records can be erased. Delete any public posts through Facebook if you also want those removed.

We keep information for as long as reasonably necessary to respond to inquiries, deliver services, maintain business records, resolve disputes, meet tax or accounting obligations, and satisfy other legal requirements.

When information is no longer needed, we will delete it, de-identify it, or securely archive it where practical and appropriate.

Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information we hold about you. You may also have the right to object to certain processing or request data portability under applicable law.

We use reasonable administrative, technical, and organizational measures designed to protect personal information from unauthorized access, loss, misuse, or alteration.

No website, database, or transmission method is completely secure. Because of that, we cannot guarantee absolute security.

Our website and services are not directed to children under 13, and we do not knowingly collect personal information from them.

We may update this Privacy Policy from time to time. If we make material changes, we will post the revised version on this page and update the effective date shown above.