Home — The social media management platform built for US government — US Privacy Policy

Privacy Policy

Policy Quick Links:
Terms and Conditions
Privacy Policy

This is the Privacy Notice for SocialSignIn Inc.

This privacy notice is not something for you to agree, nor does it form part of our terms and conditions. It is to simply tell you what we do with your personal data and be as transparent as possible.

Who are we?

Our company is called SocialSignIn Inc., but we are more commonly known as Orlo. We are a Delaware corporation with an address at 75 State St Suite 100 Boston, MA 02109.

What data do we process?

If you are a customer of Orlo, we will hold the following information about you:

Your name and contact information
Social media URL’s
Your organisation’s name and address
Information about your business activities
Information and documentation about your matters or enquiries, including communications with you
Billing and payment information

As a potential customer, we will hold the following:

Your name, and contact information
Information and documentation relating to your business and sector, from yourself, websites, social media and our marketing partners.

Because we use your data to engage you in a contract, if you fail to provide some or all that data, it may significantly affect our ability to provide our services to you.

Please note that we use YouTube API services. By using Orlo to manage your YouTube account you are agreeing to be bound by their terms of service, available to view here (https://www.youtube.com/t/terms). You can also view Google’s Privacy Policy here and revoke access at any time through the Google Security Settings page.

Engaging you in and continuing our commercial relationship

We use the information we hold about you and your business, both personal and otherwise, to give you the best product and service we can.

We will add your details to our email address book and customer relationship management platform. We also use your information to send contracts, bill you, and keep track of payments that you make, as well as to keep in contact throughout our relationship.

We will retain your personal data until our contract expires or is terminated, at which point, we will delete your data from our live systems. Our back up files are overwritten every 4 weeks. Contracts and email correspondence will be retained for 7 years before deletion.

We will continue to send electronic marketing to you until you opt out.

Sending email direct marketing to prospective and existing business clients

If you are from a corporate or public sector organisation and we have met at a conference or networking event, you have asked for information on internet forums, contacted us via our website or email and we feel that you could be a suitable customer, we will perform due diligence checks to ensure that we would be a compatible company for you. The information from these checks is used to contact you and to explore business opportunities. We will also proactively identify suitable prospective customers and send email marketing direct to the appropriate representative of the organisation to facilitate an introduction.

If you are an existing customer, we will send you appropriate information and updates on our product and services.

If at any time, you want to stop receiving emails from us, simply let us know by using the unsubscribe link on our emails or contact us direct, and we will stop.

Third parties

As a general principle, we will not transfer your personal data to third parties without your permission, but there are some exceptions to this:

It is possible, though unlikely, that we might be forced to disclose your information in response to a court order or other binding mandate.
We use an accountancy service which have limited visibility of your personal business data for the administration of company financial affairs.
If you do not pay your bills, we may choose to engage a third party to recover any money you owe us.

We do use other organisations to process your data on our behalf, these are software services hosted in the ‘cloud’. These services are used to manage our contact with you, such as our customer relationship management system; to store data, provide email functionality and online collaboration tools.

We only engage with those data processors which can provide us reassurances of their ability to keep your data safe and secure. We ensure that they have the right technical and organisational measures in place and that our agreement is covered by the appropriate contractual arrangements.

Where do we keep your data?

For clarity, all personal data that is processed by the Orlo platform, is stored in UK based, accredited data centres.

For our own commercial purposes, if you are a customer or prospective customer, the software services we use to manage your personal data (such as Google, HubSpot and Xero accounting), store your data in their secure data centres. Where we are able, we specify UK based storage, but where data must be transferred out of the UK, our providers have put in place Standard Contractual Clauses as an authorised transfer mechanism. Should any other need arise to transfer your data outside of the UK, we will ensure adequate protections are in place.

Security

We have implemented appropriate technical and organisational measures to protect data. We have in place technical measures, such as anti-virus, anti-malware, strong passwords, and authentication protocols. Information passed over the internet to our software services is protected by Transport Layer Security (TLS) encryption. We have organisational measures in place which include policies and procedures to protect your data and access your rights, and we provide training to our staff.

Reporting

While we strive to maintain the security of your personal data, we cannot guarantee that loss, misuse, unauthorized access, or alteration of your personal data will not occur. If you receive any suspicious requests, please refrain from providing your personal data and report the incident by contacting us at hello@orlo.tech.

Additionally, we cannot ensure the security or confidentiality of information transmitted to or from us via the internet or wireless connections, including email, phone, or text messages, as we cannot protect that information once it leaves your device until it reaches us. If you believe your personal data may no longer be secure, please reach out to us at hello@orlo.tech.

Your Rights

Depending on the data protection laws that apply to you, you may have the right to:

Get access to your personal data and information about our processing of it
In some circumstances, restrict our processing of your data and compel us to delete the bits we do not use for legal purposes
Object to our processing for business to business marketing
Ask us to rectify any inaccurate information we may inadvertently hold
Request deletion of your information

If you want to exercise any of these rights, please just get in contact at the above address or email us at hello@orlo.tech

Data Deletion Instructions for Meta Users

If you have used Facebook Login or otherwise connected your Meta account (e.g. Facebook, Instagram, Threads, WhatsApp) to Orlo, you may request the deletion of any data that our application has received from Meta.

You can request deletion in one of the following ways:

Option 1: Self‑Service Deletion

Log into your Facebook account.
Go to Settings & Privacy → Settings → Apps and Websites.
Find Orlo in your list of connected apps.
Select Remove.
This will delete the app’s access to your data and trigger Meta’s automated data‑deletion request to us.

Option 2: Direct Request to Orlo
You may also request deletion of Facebook‑related data by contacting us at: hello@orlo.tech
Include the subject line: “Facebook Data Deletion Request” and the email address you used with Facebook Login.
We will delete all Facebook‑provided data associated with your account within 30 days of receiving your request. Once the data has been deleted, we will provide you with a confirmation notification via email.

This privacy notice was last updated in April 2026.

Privacy Policy

Data Deletion Instructions for Meta Users

See Orlo in action.

The only community engagement platform designed for the public sector