ORCA Privacy PolicyORCA Privacy Policy

1. Scope

This Policy applies to the ORCA website, applications, APIs, and the ORCA autonomous execution platform (collectively, the “Service”). It does not apply to third-party services you connect to ORCA, which are governed by their own privacy policies.

2. Information We Collect

Because ORCA's core function is contextual and autonomous, we collect categories of data structured by function (Identify-P):

• Account and identity data: Name, email address, authentication credentials, and account preferences.
• Contextual signals: Information you authorize ORCA to read in order to make decisions, including calendar schedules, location (home/work status if enabled), budget thresholds, and connected wearable device data.
• The Personal Life Graph: A persistent, evolving profile built from your preferences, routines, connected services, referenced contacts, and the historical log of suggested, prepared, confirmed, or executed actions.
• Connected-service data: Data from third-party tools you link (e.g., messaging, email, developer tools, shopping, travel, smart-home), strictly limited to what is needed to execute authorized actions.
• Transaction and payment data: Where you authorize purchases or bookings, payments are processed via PCI-compliant third-party payment processors. Full card numbers are never stored on ORCA servers.

3. How We Use Information

We process data only for specified, legitimate purposes:

• To provide, operate, and maintain the autonomous execution platform.
• To build and maintain your Personal Life Graph for contextual decision-making.
• To execute authorized actions across your connected tools and workflows.
• To improve recommendation relevance based on your feedback (with opt-out controls).
• To protect account security, prevent fraud, and comply with legal obligations.

4. AI Processing and Third-Party Subprocessors

ORCA's reasoning is powered in part by leading third-party foundation model providers (such as OpenAI, Anthropic, and Google). Relevant contextual data required for a specific task is transmitted to generate execution plans.

5. How We Share Information

Information is disclosed only under strict parameters:

• Connected services: Directed by your workflow instructions to complete actions.
• Infrastructure subprocessors: Hosting, database, and AI partners bound by confidentiality and data processing agreements.
• Legal compliance: When required by lawful process or to safeguard vital user safety.

6. Data Security (Protect-P)

We implement comprehensive technical and operational safeguards aligned to NIST SP 800-53:

• End-to-end encryption in transit (TLS 1.3) and at rest (AES-256).
• Least-privilege role-based access controls and anomaly detection auditing.
• Automated risk assessment scoring prior to executing any autonomous step.
• Formal incident response protocols with mandatory breach notification timelines.

7. Your Choices and Controls (Control-P)

• Autonomy Levels: Adjust autonomy between Suggest, Prepare, Confirm, and Auto Execute per capability at any time.
• Service Disconnection: Disconnecting a service immediately revokes future access and halts ingestion.
• Data Portability & Deletion: You can export your Personal Life Graph or request full account and data deletion by contacting privacy@orca.ai.

8. Automated Decision-Making & Transparency (Communicate-P)

Every autonomous action taken by ORCA is logged in an immutable, human-readable audit trail. Actions involving financial spend or irreversible changes require explicit, itemized user confirmation by default.