← Back to Orca
Legal

Privacy Policy

Last updated .

On this page
  1. Summary
  2. Who we are
  3. What we collect
  4. How we use it
  5. Legal bases (GDPR)
  6. Who we share with
  7. Retention
  8. International transfers
  9. Cookies and tracking
  10. Children's privacy
  11. Your rights
  12. California (CCPA / CPRA)
  13. United Kingdom (UK GDPR)
  14. Security
  15. Data Protection Officer
  16. Changes to this policy
  17. Contact

Summary

Orca is a Minecraft mod and addon creation platform. To run servers for you, we collect the data we need (account info, server config, support messages, AI chat transcripts, basic device info). We use it to operate, support, and improve the service, and to keep it safe.

We do not sell personal information. We share data only with vendors that help us run Orca (listed below) and when required by law.

Orca is intended for users aged 13 and older. We never knowingly collect personal information from children under 13. If you're under 18, you may use Orca only with a parent or guardian's involvement and consent (see Children's privacy).

Who we are

"Orca", "we", "us", and "our" refer to Simplifine Corp, a Delaware C Corporation, doing business as "Orca", which operates the Minecraft mod and addon creation platform at orcaclient.com. Simplifine Corp is the data controller for the personal information described in this policy. If you have questions, email support@orcaclient.com.

What we collect

Information you give us

  • Account. Email address; display name; Discord OAuth ID and avatar URL when you sign in with Discord.
  • Server configuration. Server names, world data, mod and plugin lists, permission settings, and any files you upload to your server.
  • Support and chat. Messages you send to support and transcripts of conversations with the Orca AI assistant, including any code, configuration, or files attached. This also includes the build or asset request text a connected app, such as ChatGPT or Claude, sends to an Orca tool on your behalf.
  • Connected apps.When you connect an app through OAuth, we record the connected app's name and version, the Orca tool called, whether it succeeded, its duration, and the Orca job, creation, or project identifiers needed to operate and troubleshoot the integration. Connector analytics stores only a non-reversible fingerprint and length for request text, not another copy of the request or any file body.
  • Payment. If you upgrade to a paid plan, our payment processor (Stripe) collects card details directly. We receive only a customer token, the last four digits, card brand, and billing country.
  • Parental consent.If you're under 18, any contact details a parent or guardian provides when they consent to your use of Orca.

Information collected automatically

  • Device and connection. IP address, user-agent, rough geographic region derived from IP, language preference, and referring URL.
  • Usage. Pages viewed, features used, in-product events, and the timing of those events.
  • Server logs. Operational logs from the Minecraft servers you run on Orca, including player join/leave events, chat (if your server has chat logging enabled), command usage, and crash reports.

How we use it

  • Provision, run, and monitor your Minecraft servers.
  • Power the Orca AI assistant (mod suggestions, config edits, plugin installation, error explanations).
  • Carry out requests from apps you connect to Orca, keep those connections secure, and let you revoke their access.
  • Authenticate you and protect your account.
  • Bill you, process refunds, and detect fraudulent or abusive payments.
  • Respond to support requests.
  • Detect, prevent, and respond to abuse, fraud, attacks on the service, and violations of our Acceptable Use Policy.
  • Comply with legal obligations and respond to legal process.
  • Improve Orca: debugging, analytics, and product research. Where required by law, we anonymize or aggregate data before using it for improvement purposes.

Legal bases for processing (GDPR)

If you are in the European Economic Area, UK, or Switzerland, we process your personal data on these legal bases:

  • Contract. To provide Orca after you sign up.
  • Legitimate interests. Security, fraud prevention, product analytics, and customer support.
  • Consent. Optional cookies and marketing emails. You can withdraw consent at any time.
  • Legal obligation. Tax, accounting, and responding to lawful requests.
  • Parental consent.Processing the data of users under 18, where a parent or guardian's consent applies.

Who we share with

We share personal information only with these categories of recipients:

  • Hosting and infrastructure. Microsoft Azure (server compute), Amazon Web Services (storage, builds, and backend compute), Vercel (web frontend hosting), and Supabase (database and authentication).
  • AI assistant. Microsoft Azure OpenAI Service processes chat transcripts and build requests to generate responses and Minecraft mods, plugins, and addons. Azure OpenAI does not train models on Orca user content.
  • Mod and plugin builds. e2b runs isolated cloud sandboxes that compile the mods, plugins, and addons you generate.
  • Payments. Stripe processes card payments and performs identity-verification card tokens for parental consent.
  • Analytics and error monitoring. PostHog processes minimized product analytics and error information.
  • Legal and safety.Law enforcement and other parties when required by valid legal process, or to protect the rights, property, or safety of Orca, our users, or the public, including reports of child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC).
  • Successors. A buyer or successor entity in a merger, acquisition, or asset sale, subject to this policy.

We do not sell personal information and do not share it for cross-context behavioral advertising.

Retention

  • Account data. Kept while your account is active, plus up to 90 days after deletion for backups and dispute resolution.
  • Server worlds and files. Kept while your subscription is active. Deleted within 30 days after a server is permanently terminated.
  • Server logs. 30 days for operational logs. Security event logs may be kept up to 1 year.
  • AI chat transcripts. Kept while your account is active. You can delete individual conversations from the console at any time.
  • Connected-app records. OAuth connection records, minimized tool-call metadata, and build requests are kept while your account is active, plus up to 90 days after deletion for backups, security, and dispute resolution. Revoking an app immediately stops its new access. You may request deletion by emailing support@orcaclient.com.
  • Billing records. Kept for 7 years to comply with tax and accounting requirements.

International transfers

Orca is operated from the United States. If you are located outside the United States, your data will be transferred to and processed in the U.S. and in any other country where our vendors operate. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, plus supplementary measures where appropriate. You may request a copy of the safeguards used by emailing support@orcaclient.com.

Cookies and tracking

We use a small number of first-party cookies and similar technologies. They are used to keep you signed in, remember preferences, secure the service against attacks, and measure how the product is used. We do not use third-party advertising cookies. You can clear cookies in your browser at any time. Disabling strictly necessary cookies will break authentication.

Children's Privacy

Orca is intended for users aged 13 and older. Children under 13 are not permitted to use Orca, and we do not knowingly collect personal information from anyone under 13. If you are under 18, you may use Orca only with the involvement and consent of a parent or guardian.

If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it as quickly as possible. Parents or guardians who believe their child under 13 has provided us personal information should contact us at support@orcaclient.com and we will remove it.

What we never collect from minors

  • Precise geolocation (street-level or finer).
  • Biometric identifiers (face prints, fingerprints, voiceprints).
  • Government-issued ID numbers (driver's license, passport, SSN).
  • Phone number.
  • Photographs or video of the minor.
  • Inferences used to build behavioral profiles for advertising.

Your rights

Subject to local law, you have the right to access, correct, delete, port, restrict, or object to our processing of your personal data, and to withdraw consent where processing is based on consent.

  • Access. Request a copy of the personal information we hold about you.
  • Rectification. Ask us to correct information that is inaccurate.
  • Erasure. Ask us to delete your personal information. We will honor this unless we are legally required to retain it.
  • Portability. Receive a copy of your data in a structured, commonly used, machine-readable format.
  • Object. Object to processing based on legitimate interests.
  • Restrict. Ask us to restrict processing while a dispute is resolved.
  • Complain.Lodge a complaint with your local data protection authority. We'd appreciate the chance to address your concern first by emailing support@orcaclient.com.

To exercise any right, email support@orcaclient.com. We respond within 30 days.

California (CCPA / CPRA)

California residents have the right to know the categories and specific pieces of personal information we have collected, to delete personal information, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CPRA. We do not use sensitive personal information for inferring characteristics about consumers.

To submit a CCPA request, email support@orcaclient.com with the subject line "CCPA Request". We will verify your identity using the email tied to your account before responding. You may also designate an authorized agent.

United Kingdom (UK GDPR)

UK residents have the rights set out in the UK GDPR and the Data Protection Act 2018, equivalent to those listed above. You may complain to the Information Commissioner's Office at ico.org.uk.

Security

We use industry-standard safeguards: TLS in transit, encryption at rest for stored data, role-based access controls, audit logging, and regular dependency scans. No system is perfectly secure; if you believe your account has been compromised, contact us immediately at support@orcaclient.com.

Data Protection Officer

Orca has not formally appointed a Data Protection Officer because we do not meet the GDPR thresholds that require one. For privacy questions, the responsible contact is support@orcaclient.com. If a DPO is required for a future jurisdiction, we will update this notice.

Changes to this policy

If we make material changes, we will notify you by email or by an in-product banner before the changes take effect. The latest version is always available at this page with the "last updated" date at the top.

Contact

For any privacy question, email support@orcaclient.com.