1. Information We Collect

We collect the following types of information:

• Account Information: name, email address, business details, and authentication details.
• Billing Information: subscription and payment details provided to our payment provider (Stripe). We do not store your credit card details.
• Business Data and Documents: files, records, and other data you upload to the Platform.
• Usage Data: technical information such as IP address, browser type, device identifiers, and activity logs.

2. How We Use Your Information

We use your information only to:

• Provide, maintain, and improve the Platform.
• Process payments and manage subscriptions.
• Communicate with you regarding your account, updates, and support.
• Secure the Platform and detect/prevent fraud or misuse.
• Comply with legal obligations.

3. Data Ownership and Storage

• You retain ownership of all business data and documents you upload.
• We store and process your data only to provide the Platform.
• Data may be stored on secure third-party providers (such as Amazon Web Services) located in Australia or other jurisdictions with comparable privacy protections.
• We take reasonable measures to protect your data from unauthorised access, loss, or misuse.

4. Data Retention and Deletion

• We retain your account information and business data for as long as your account is active.
• If you delete your account, your data will be permanently deleted from our systems within 90 days, except where retention is required by law (e.g. tax or financial reporting obligations).
• Aggregated or anonymised data that cannot be linked back to you may be retained for analytics or service improvement.

5. Sharing of Information

We only share information in the following circumstances:

• Service Providers: with trusted third parties who assist in providing the Platform (e.g. Stripe for billing).
• Legal Obligations: when required by law, regulation, or court order.
• Business Transactions: in the event of a merger, acquisition, or sale of assets, your data may be transferred, subject to confidentiality protections.

6. Cookies and Analytics

We may use cookies and similar technologies to:

• Authenticate users,
• Remember preferences, and
• Collect usage data to improve the Platform.

You can manage cookies through your browser settings, though some features may not function properly without them.

7. Security

We use industry-standard measures to protect your information, including encryption, secure access controls, and regular monitoring. However, no system is completely secure, and we cannot guarantee absolute protection.

8. Your Rights

Depending on your jurisdiction (including under the Australian Privacy Act 1988), you may have rights to:

• Access and request a copy of the information we hold about you.
• Request correction of inaccurate or outdated information.
• Request deletion of your data, subject to legal or contractual obligations.
• Withdraw consent to certain processing activities.

Requests can be made by contacting us at support@orca-management.au.

9. Children's Privacy

The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to you via email or in-app notification.

11. Contact Us