Last updated: November 2, 2026
Privacy Policy
This Privacy Policy describes how Suddy, Inc., the company behind Orlin ("we", "us"), collects, uses, and shares information when you use our service.
1. Information We Collect
We collect information you provide directly (such as your name, email address, and payment details), information generated when you use the Service (such as log data, device information, and usage events), and information from third parties such as our authentication and payment providers.
2. How We Use Information
We use information to provide and improve the Service, process payments, communicate with you about your account and product updates, prevent fraud and abuse, and comply with legal obligations.
3. Legal Bases for Processing
Where required (for example, under the GDPR), we process personal data on the basis of contract performance, legitimate interests, your consent, or compliance with legal obligations.
4. Sharing Information
We share information with service providers who help us operate the Service, including hosting, analytics, transactional email (Resend), authentication (Better Auth), payments (Stripe), and AI model providers (such as OpenAI and Google) that process your requests to generate content. We do not sell personal information. We may disclose information when required by law or to protect rights and safety.
5. Google User Data
If you connect Google Calendar or Google Drive, Orlin gets read-only access to your calendar events and Drive files. We use this data only to plan, write, and schedule your social posts. We never sell it, never use it for advertising, never use it to develop, improve, or train generalized AI or machine learning models, and never allow people to read it except with your consent, for security purposes, or to comply with the law. To do this, relevant calendar events and file details are sent to our AI model providers. Calendar events are read live and not saved separately, though events the assistant reads may appear in your conversation history. Files you choose to import from Drive are copied into your media library. Your Google access tokens are stored encrypted. You can disconnect at any time from the apps page: we then revoke our access and delete the tokens. Imported files and conversation history stay until you delete them or your account. Orlin's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
6. Social Accounts You Connect
If you connect Instagram, Threads, or TikTok, we receive your account ID, username, display name, profile photo, and the permissions you grant. We use them only to publish the posts you approve, show your post performance, and display your account in the app. Your access tokens are stored encrypted. Disconnecting an account deletes its tokens, its stored performance data, and our copy of its profile photo from our systems.
7. TikTok Data
If you connect TikTok, Orlin receives your basic profile (account ID, username, display name, and profile photo), your account totals (followers, likes, and video count), and a list of your posts with their caption, cover image, link, publish date, views, likes, comments, and shares. We store this to show your account and post performance in the app. When you publish to TikTok, we send TikTok the media, caption, and settings you chose, including who can view the post, whether comments, Duets, and Stitches are allowed, and any commercial content disclosure. Nothing is posted without your approval, and you can send a post to your TikTok drafts instead of publishing it. Before each post, we read your current posting options from TikTok so the choices you see match your account. We never sell TikTok data or use it for advertising. TikTok data is kept while the account stays connected. Disconnecting TikTok deletes it from our systems, and you can ask us to delete it at any time. You can also remove Orlin's access at any time from your TikTok app settings. Your use of TikTok remains subject to TikTok's own Terms of Service and Privacy Policy.
8. Cookies and Similar Technologies
We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling some cookies may affect functionality.
9. Data Retention
We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You can request deletion of your data at any time.
10. Security
We use industry-standard technical and organizational measures to protect personal information. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.
11. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.
12. International Transfers
Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for cross-border transfers.
13. Children's Privacy
The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us so we can delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in-app notice and update the "Last updated" date above.
15. Contact
Questions about this Privacy Policy or your data? Email us at [email protected].