Orca Linq Privacy Policy

What we process

We process account details, tenant configuration, domain verification records, channel connection metadata, conversation content, support messages, usage records, billing metadata, and operational logs needed to provide the service.

Customer conversation data

Tenants control the content they collect through website chat, WhatsApp, Telegram, LINE, Meta, Shopify events, and custom endpoints. We process that content to route, answer, summarize, hand off, audit, and support conversations.

AI and tool processing

AI providers and tenant-connected tools may process conversation context when enabled by the tenant. The platform is designed to send only the data needed for the selected feature and to avoid sending credentials to AI systems. We do not use Tenant customer data to train foundation models without explicit consent.

Security and logs

We use operational logs for reliability, abuse prevention, debugging, billing integrity, and security. Logs should not contain raw secrets, full credentials, or unnecessary sensitive content.

Retention, export, and deletion

Retention depends on tenant settings, plan, legal requirements, and backup windows. Tenants may request exports or deletion workflows for eligible data.

Subprocessors

Depending on configuration, subprocessors may include hosting, analytics, email, payment, channel providers, AI providers, and storage services. BYOK channel providers are selected and controlled by the tenant.

Data Subject Rights (GDPR/CCPA)

Tenants are the Data Controllers for their end-users. Any end-user requests regarding data access, rectification, or deletion must be directed to the respective Tenant. We will assist Tenants in fulfilling these requests as legally required.

Cookies and tracking

We use essential cookies and similar technologies to authenticate users, maintain session security, and ensure core platform functionality. We also use third-party analytics services, such as Google Analytics, which may set non-essential cookies to help us understand how the site is used.

International data transfers

Data may be processed and stored in multiple regions depending on the Subprocessors utilized by the platform and the specific BYOK channel integrations enabled by the Tenant. We employ standard contractual clauses and other legal mechanisms to safeguard international data transfers.

WhatsApp Business messaging

OrcaLinq is operated by Orca Linq and uses the WhatsApp Business Platform to deliver messages on behalf of the businesses (Tenants) that use the service. Where a Tenant messages you on WhatsApp, that Tenant is the controller of the conversation and OrcaLinq acts as their processor. By providing your WhatsApp number and opting in, you consent to receive messages of the following kinds:

• Transactional messages — order confirmations, delivery and booking updates, appointment reminders, and one-time verification codes.
• Customer support replies — responses to questions you have asked, whether answered by an automated assistant or by a person.
• Marketing messages — only where you have separately opted in to receive them.

Opting out of WhatsApp messages

You can opt out at any time by replying STOP to any WhatsApp message you receive from us. We record the opt-out immediately and stop sending, including business-initiated template messages. Reply START to resume. Reply HELP at any time for contact details and these instructions. We do not sell or share your WhatsApp number with third parties for their own marketing. Message and data rates may apply.

Facebook and Instagram messaging

Where a Tenant connects a Facebook Page or an Instagram business account, we receive the messages you send to that business and the profile information Meta makes available with them, so we can route and answer your enquiry. The Tenant is the controller of that conversation and OrcaLinq acts as their processor. We do not use Facebook or Instagram data for advertising, and we do not sell it. Connecting or disconnecting these accounts is done by the business, not by us.

Deleting data obtained through Meta

You can have data we obtained about you through Facebook, Instagram, or WhatsApp deleted. Remove the app from your Facebook account and Meta notifies us automatically, or contact us directly. Either way you get a confirmation and a way to check the status. Full instructions, including what happens to accounts you connected on behalf of a business, are on our data deletion page.

Questions and requests

For privacy questions, data requests, or controller/processor questions, contact hello@orcalinq.com.