Privacy Policy

This Privacy and Data Protection Notice explains what to expect when you interact with Orca Tools through our website (https://orca.tools), sign up for an account, or use our services.

We’ll explain:

• Who we are and how to contact us

• What types of data we collect and process

• Why we process your data and how long we keep it

• Whether we share your data with others

• Whether we transfer data outside the EEA

• How we protect your data

• Your rights regarding your personal data

Who We Are and How to Contact Us

We are Orca Tools, a company providing advanced developer tools and automation services to help teams ship software faster and more securely. We respect your privacy and comply with relevant data protection regulations, including the General Data Protection Regulation (EU) 2016/679 (GDPR).

For any data protection queries, please contact us:

Email: support@orca.tools
Website: https://orca.tools

What Types of Data We Collect

We collect and process the following types of personal data when you interact with our website or services:

• Account information: name, email address, organization name, login credentials, profile information.

• Usage data: actions taken on the platform (e.g. project creation, deployment triggers, integrations used), browser type, IP address, device data, and access logs.

• Communication data: messages you send us via email or contact forms, feedback, and support requests.

• Third-party data: if you link Orca to services like GitHub or GitLab, we may process repository metadata, user access permissions, commit messages, and deployment history, as permitted by your authorization.

We also use cookies and similar tracking technologies. Learn more in our Cookies Policy section.

Why We Process Your Data and How Long We Keep It

We process your data for the following reasons:

• To provide and operate the Orca platform

• To manage your account and subscriptions

• To improve our services and your user experience

• To detect and prevent fraud or abuse

• To provide support and respond to inquiries

• To comply with legal obligations

We retain personal data only for as long as necessary for these purposes. For example, account data is retained as long as your account is active, and logs may be stored for a limited time for security and compliance purposes.

Who We Share Your Data With

We do not sell your data. However, we may share personal data with:

• Cloud infrastructure providers (e.g., AWS, Vercel) to host and deliver the platform

• Analytics and monitoring tools (e.g., Google Analytics) to improve our service quality

All third-party providers are bound by data processing agreements and are required to comply with GDPR and other applicable laws.

International Data Transfers

Some of our providers are located outside the European Economic Area (EEA), including in the United States. We ensure that appropriate safeguards are in place for such transfers, such as Standard Contractual Clauses approved by the European Commission.

How We Keep Your Data Safe

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted data storage and transfer (HTTPS, AES-256)

• Secure authentication and access control

• Regular security assessments and monitoring

• Least privilege access for internal systems

If you have an account with us, you are responsible for maintaining the confidentiality of your credentials.

Your Rights

You have rights under the GDPR and other applicable laws, including:

• Right to access – You can request a copy of the personal data we hold about you.

• Right to rectification – You can ask us to correct incorrect or incomplete data.

• Right to erasure – You may request deletion of your personal data when no longer necessary.

• Right to object – You can object to certain types of processing.

• Right to restrict processing – You can ask us to restrict the use of your data under certain circumstances.

• Right to data portability – You may ask us to provide your data in a machine-readable format.

• Right to withdraw consent – If processing is based on consent, you can withdraw it at any time.

To exercise your rights, please contact us at: support@orca.tools

Children’s Data

Orca Tools is not intended for use by individuals under the age of 16. We do not knowingly collect data from children. If we learn we have collected such data, we will delete it promptly.

Changes to This Policy

We regularly review and update our Privacy and Data Protection Policy. This version was last updated on July 30, 2025.