Orca Security

Privacy Policy Overview

1. Data Collection and Use

Orca may collect personal data from three sources:

• Information you provide: The policy refers to contact details, comments, feedback, and other content submitted through the Sites—for example, when requesting a demo, support, or communicating with Orca.
• Automatically collected information: This may include:
• How you use the Sites, including links clicked and videos watched
• Device and connectivity details, such as IP address, browser, operating system, referring and exit URLs, and device identifiers
• Cookies, pixels, web beacons, and similar tracking technologies
• Third parties: Orca may receive information from third parties and combine it with information collected directly or automatically. This may be used to improve records, identify potential customers, and suggest services.

Uses include:

• Operating, customizing, troubleshooting, testing, and improving the Sites
• Monitoring performance and reliability
• Providing support and responding to requests
• Detecting fraud, misuse, security incidents, or illegal activity
• Marketing and advertising, including targeted advertisements on other websites and applications
• Publishing customer case studies, if you consent
• Complying with legal obligations and responding to valid government or law-enforcement requests
• Protecting people from serious harm or illegal activity
• Enforcing agreements and protecting Orca’s legal and business interests
• Handling mergers, acquisitions, financing, or sales of business assets

Orca may anonymize or aggregate information so it cannot reasonably identify you. It may then use or disclose that information without restriction.

2. User Rights

Depending on your location, you may have rights under laws such as the GDPR or CCPA/CPRA, potentially including rights to:

• Access or obtain a copy of your personal data
• Correct inaccurate information
• Delete data
• Restrict or object to processing
• Withdraw consent
• Opt out of marketing communications and certain cookies or tracking
• Complain to a data protection authority

These rights are subject to exceptions—for example, where retention is legally required, needed for litigation, or necessary to protect another person’s information. If a third-party service received your data through an integration or app, you may need to contact that provider directly.

The policy does not clearly provide the actual request submission details—the relevant contact fields appear incomplete—so users may need to locate current contact information elsewhere on Orca’s Sites.

3. Third-Party Sharing

Orca shares data with:

• Service providers supporting operations, analytics, customization, security, customer support, and marketing
• Advertising partners
• Orca affiliates and potentially prospective affiliates
• Buyers or successor companies in a merger, acquisition, financing, or asset sale
• Authorities or other parties when legally required, or in emergencies involving serious injury or death

The policy does not list all third parties by name. Cookies and advertising partners may create tracking and profiling implications; users should review the separate Cookie Policy for controls and opt-out options.

4. AI/ML Training

The policy does not state that personal data is used to train artificial-intelligence or machine-learning models. It mentions analytics, experimentation, personalization, and aggregated or anonymized information, but does not expressly address AI training. Users should not assume that AI training is prohibited or permitted without obtaining clarification from Orca.

5. Key User Obligations and Restrictions

• Review the Privacy Policy, Terms of Use, and Cookie Policy together.
• Do not provide personal data if under 18 without parental or guardian involvement; Orca does not knowingly target children.
• Manage marketing preferences and cookies if you do not want promotional communications or tracking.
• Continued use after policy changes may constitute acceptance.
• Data submitted through third-party apps may be subject to those providers’ policies and deletion procedures.

6. Security, Liability, and Disputes

Orca uses “industry-standard” technical and organizational safeguards but expressly states it cannot guarantee that data will not be compromised by unauthorized access.

This Privacy Policy does not set out governing law, arbitration, court venue, liability caps, indemnities, or specific dispute procedures. Those terms are likely addressed in the separate Terms of Use. The policy also preserves statutory rights and legal remedies.

7. Changes

The current version is posted on the Sites with a “Last Revised” date. Orca may change the policy at its discretion:

• Substantial changes: Notice may be provided on the homepage and/or by email. Changes take effect seven days after notice.
• Other changes: Effective on the stated revision date; continued use constitutes acceptance.

Users should periodically check the policy, particularly because email notice depends on Orca having a usable email address.

Terms of Use: Key Points and Risks

*This summary covers the Terms of Use provided, last updated June 2019. The separate Privacy Policy is incorporated by reference but was not included, so important data-handling details cannot be confirmed from this document alone.*

1. Data Collection and Usage

• The Terms do not specify what personal data is collected, such as names, email addresses, IP addresses, device information, cookies, or communications.
• Section 10 states that Orca may use personal information collected through the Site in accordance with its Privacy Policy: [orca.security/privacy-policy](https://orca.security/privacy-policy).
• By using the Site, you agree to the collection and use of personal information as described in that Privacy Policy.
• The Terms disclaim responsibility for the security of information you provide, except as expressly stated in the Privacy Policy. The Site is not guaranteed to be free from security breaches, viruses, or other technical problems.

Practical risk: You must review the Privacy Policy to understand the actual categories of data collected, purposes of use, retention periods, cookies, international transfers, and security practices.

2. User Rights

The Terms do not grant specific privacy rights, such as:

• Accessing or correcting personal data
• Deleting data
• Objecting to processing
• Restricting processing
• Data portability
• Withdrawing consent
• Opting out of marketing

Any such rights must be determined from the Privacy Policy and applicable law, such as the GDPR, UK GDPR, or applicable U.S. state privacy laws.

The document does provide limited procedural rights under the copyright policy. For example, users may submit a counter-notification if their material is removed for alleged copyright infringement, subject to detailed DMCA requirements.

3. Third-Party Sharing

The Terms do not explain whether Orca sells, rents, or shares personal data with third parties.

They do state that:

• The Site may link to third-party websites.
• Orca does not control or accept responsibility for those websites’ content, privacy policies, or practices.
• Users are responsible for reviewing third-party terms and privacy policies.
• Orca disclaims liability for activity or information users send to third-party websites.

The Privacy Policy may address service providers, affiliates, business transfers, legal disclosures, analytics providers, or other recipients, but those details are absent here.

4. AI/ML Training

The Terms contain no provision stating whether user data, User Submissions, or Site interactions are used to train artificial intelligence or machine-learning models.

Accordingly, this document does not establish:

• Whether personal data is used for AI training
• Whether submitted content is used to improve products or models
• Whether data is anonymized or de-identified
• Whether users can opt out

Users should seek clarification in the Privacy Policy or a separate product/data-processing agreement.

5. Key User Obligations and Restrictions

Users must:

• Be at least 13 years old; users aged 13–18 must review the Terms with a parent or guardian.
• Comply with the Terms and applicable law.
• Use Site content only for personal, informational purposes.
• Preserve copyright and proprietary notices when downloading or printing content.
• Avoid copying, modifying, distributing, selling, licensing, or creating derivative works from Site content without written permission.
• Not disrupt networks or servers.
• Not use automated tools such as robots or spiders.
• Not bypass security or anti-copying controls.

Orca may charge for access or usage in the future, but says users will not be charged unless they first agree to the charges.

Users must also indemnify Orca and its affiliates for claims and expenses arising from their Site use, User Submissions, interactions with other users, or violations of the Terms.

6. Liability and Disputes

• The Site is provided “as is” and “as available,” with broad warranty disclaimers.
• Orca does not guarantee accuracy, completeness, availability, security, or error-free operation.
• Orca generally excludes liability for indirect, consequential, special, incidental, exemplary, and similar damages, including loss of data, profits, revenue, or reputation.
• Orca’s total liability is capped at fees paid by the user during the three months before the claim—or potentially zero for users who paid nothing.
• Orca may terminate access immediately, with or without cause, and without liability.
• Israeli law governs the Terms, and disputes generally must be brought in the courts of Israel.
• Claims must be started within one year after arising, or they are permanently barred.

7. Changes to the Terms

Orca may change the Terms at its discretion. Revised Terms become effective 10 days after being posted on the Site. Continued use after that period constitutes acceptance.

The Terms do not promise email or individualized notice. Users should periodically check the Site. If they disagree with changes, their stated remedy is to stop using the Site.

Bottom Line

The largest uncertainties concern privacy: the Terms defer almost entirely to a separate Privacy Policy and say nothing about AI training or specific data rights. The most significant contractual risks are broad warranty and liability exclusions, indemnification obligations, unilateral termination rights, Israeli jurisdiction, and the one-year deadline for claims.