Legal & Privacy

We collect information that you voluntarily provide to us when you interact with our website, use our software ecosystem (OrcaHub, Arkus, Kyro), or communicate with us. The types of information we may collect include:

• Contact & Account Information: Name, email address, phone number, role, and organization details.
• Platform & App Data: Information generated through the Orca Hub platform and Arkus mobile app, including fleet inspection logs, uploaded photos of assets, operator names, and device information for offline-syncing.
• Transaction Data: Details about products, hardware, or SaaS subscriptions you have purchased, and payment information (processed securely by Stripe).
• Website Usage Data: Information about how you use and interact with our website, such as your IP address, browser type, and duration of your visit.

(Note regarding Location Data: As we roll out Geofencing features, the Arkus mobile app may request location permissions. This is strictly used for operational alerts and is governed by your organization's internal policies).

We use your information for specific and legitimate purposes, including:

• Providing Services: To power the Orca Hub ecosystem, process your offline-syncs, trigger automated compliance alerts, and deliver hardware orders.
• Communication: To send you updates about your account, subscription changes, and respond to support inquiries.
• Improving Our Services: To analyze platform usage and fix bugs to enhance the functionality of our software.
• Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our agreements.

We do not sell your personal or organizational data. We may share your information with trusted third parties who assist us in operating our business, such as:

• Payment Processors: To securely process your subscriptions (e.g., Stripe).
• IT and Data Hosting Providers: To host our cloud infrastructure and store data securely.
• Shipping Partners: To deliver physical hardware orders.

These third parties are contractually obligated to protect your information and use it only for the purposes for which we disclose it to them.

For users of Orca Hub (e.g., fleet operators, drivers, warehouse staff), your employer is the "Data Controller." Orca Dynasty acts as the "Data Processor," meaning we only process your data as instructed by your employer. If you are an employee of an organization using Orca Hub and wish to exercise your data rights, please contact your organization's Global Admin directly.

Your information may be transferred to and stored in secure cloud environments outside of New Zealand. If we transfer your information internationally, we will take all reasonable steps to ensure that it is protected by comparable privacy standards to those in New Zealand.

We utilize enterprise-grade security to protect your information from unauthorized access or alteration. We retain your information only for as long as you maintain an active subscription, or as necessary to comply with our legal and tax obligations.

Under New Zealand and international privacy laws, account owners have the right to:

• Access: Request access to the personal information we hold about you.
• Correction: Request a correction of any inaccurate information.
• Deletion: Request that we delete your personal information in certain circumstances.

To exercise these rights, please contact us using the details below. We will respond within 20 working days as required by the NZ Privacy Act.