Security

Orca handles campaign budgets, creator payouts, and first-party social data. We treat all three as sensitive.

Practices

Data is encrypted in transit and at rest. Social accounts connect via official platform OAuth — we never ask for your social passwords. Access to production data is restricted and audited. Payments run through regulated payment providers; Orca does not store full card or bank credentials.

Reporting

Found a vulnerability? Report it to info@tryorca.io and we'll respond within 48 hours. We ask for reasonable disclosure time and won't pursue good-faith researchers.