1. Introduction
Welcome to ORCA, operated by Obray Business Ventures, LLC doing business as Killer Warehouse. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our services, websites, integrations, and mobile apps.
2. Information We Collect
We may collect the following types of information:
- Personal Information: Name, email address, phone number, and other contact details when you provide them through forms or communications.
- Usage Information: Data about how you interact with our website and services, including IP address, browser type, and pages visited.
- Cookies: Strictly necessary cookies required to operate the site and authenticated services.
2.1 Amazon Selling Partner API Data
When you connect ORCA to Amazon Selling Partner API, we access and process seller, order, and fulfillment data as needed to provide enabled services. Depending on the features you enable, this may include:
- Order IDs, order items, SKUs, quantities, shipment and delivery statuses, return data, and refund data.
- Customer shipping contact data, including recipient name, shipping address, phone number, and email address when required to fulfill the order or permitted by Amazon policies.
- Messaging and communication metadata where applicable. We do not store message content unless necessary for the service you request.
- Integration metadata such as API tokens, authorization scopes, and technical logs related to API requests and responses.
We do not store full payment card data or bank account numbers obtained from Amazon. We request the minimum scopes necessary and use Amazon data solely to operate the features you authorize.
2.2 QuickBooks Online Data
When you connect ORCA to QuickBooks Online, we access and process certain financial and business data to provide order automation, inventory management, and related services. This may include customer and vendor names, invoices, payments, transaction details, inventory items, quantities, and fulfillment statuses.
We do not store or process sensitive financial information such as credit card details or bank account numbers.
2.3 Shopify Data
When you connect ORCA to Shopify, we access and process Shopify store, order, inventory, fulfillment, product, customer, and transaction data as needed to provide warehouse execution, order management, fulfillment, returns, reporting, and integration services. Depending on the features enabled by the merchant, this may include:
- Store and merchant information, including shop identifiers, store settings, locations, staff or account metadata, and integration configuration.
- Product, variant, SKU, inventory, collection, location, fulfillment, shipment, return, refund, and transaction data.
- Protected customer data related to orders or customer records, including customer names, email addresses, phone numbers, billing addresses, shipping addresses, and order history where needed to provide enabled services.
- Webhook events used to keep ORCA synchronized with Shopify and to respond to privacy, deletion, uninstall, and data access requests.
We request and use only the Shopify scopes and protected customer fields needed to provide the functionality enabled by the merchant. We do not use Shopify customer data for advertising or sell Shopify customer data.
2.4 Mobile App Data for iOS and Android
If you use an ORCA mobile app on iOS or Android, we may collect and process data needed for authentication, warehouse work, scanning, receiving, picking, packing, shipping, support, diagnostics, and security. This may include:
- Account and user identifiers, such as your user ID, tenant, email address, role, permissions, and login status.
- Device and app information, such as device type, operating system, app version, IP address, approximate network region, timestamps, crash logs, performance diagnostics, and security logs.
- Operational content you submit through the app, such as barcode scans, shipment or order identifiers, photos, notes, signatures, task updates, receiving records, package information, and support messages.
- Permission-based data, such as camera access for barcode scanning or photos, file/photo library access if you choose to upload an image, notification tokens if push notifications are enabled, and location data if work-location time clock reminders are enabled by your organization and permitted by you.
We do not use mobile app data for third-party advertising or cross-app tracking. If a mobile feature requires access to sensitive device permissions, we provide platform permission prompts and, where required, additional in-app disclosure and consent.
2.5 Location Data
This app collects location data to enable work-location time clock reminders even when the app is closed or not in use.
When enabled by an authorized organization and permitted by the user, the ORCA mobile app accesses device location, including background location, to determine when a user enters or leaves an approved work area and to provide local clock-in or clock-out reminder notifications.
Location data is used only for time clock geofence reminders and related workforce operations features. We do not use location data for advertising, analytics, or cross-app tracking, and we do not sell location data.
The app may process location updates on the device and may transmit location-related time clock events, audit records, or diagnostic logs to ORCA when needed to operate, secure, audit, or troubleshoot the time clock feature. Location access can be managed through device permission settings. If location permission is denied or disabled, barcode scanning, inventory, warehouse, and other non-location features may continue to work, but geofence-based clock-in and clock-out reminders may not be available.
3. How We Use Your Information
- To provide, operate, and improve our services, including automation, synchronization, and integrations.
- To authenticate users, manage authorizations, and maintain integration settings.
- To communicate about updates, support, security notices, or inquiries.
- To improve performance, reliability, and security.
- To detect, investigate, prevent, and respond to fraud, abuse, or security incidents.
- To comply with contractual and legal obligations.
- To create aggregated or de-identified insights that do not identify you or your customers.
- To operate mobile app functionality, including login, scanner workflows, task workflows, push notifications, crash diagnostics, and security monitoring.
- To operate work-location time clock reminders and related audit, security, and troubleshooting workflows when location access is enabled and permitted.
4. Sharing Your Information
We do not sell or rent your personal information. We also do not permit service providers to sell or share your data.
We may share information with service providers who help operate our services, to comply with legal obligations, to respond to lawful requests, or to protect rights, property, or safety.
4.1 Sharing with QuickBooks Online
We share data with QuickBooks Online only to facilitate synchronization between your ORCA account and QuickBooks. We do not sell or distribute QuickBooks data to third parties except as required for legal compliance.
4.2 Sharing with Amazon Selling Partner API
We share data with Amazon only as necessary to operate features you enable, such as syncing orders, inventory, and fulfillment updates. We do not sell Amazon data or use it for advertising.
4.3 Sharing with Shopify
We share data with Shopify only as necessary to operate features you enable, such as syncing orders, products, inventory, fulfillment updates, refunds, returns, and privacy compliance events. We do not sell Shopify data or use it for advertising.
4.4 Mobile Platform Providers
When you use an ORCA mobile app, Apple, Google, mobile operating systems, app stores, push notification services, and crash reporting infrastructure may process limited technical information needed to distribute, secure, operate, and diagnose the app. Our app store privacy disclosures and Google Play Data safety disclosures are intended to match the data practices described in this Privacy Policy.
5. Cookies and Tracking Technologies
We use only strictly necessary, first-party session cookies to operate the site, such as keeping you signed in and protecting against CSRF. We do not use analytics, advertising, or cross-site tracking cookies, and we do not embed third-party trackers.
ORCA mobile apps do not use advertising identifiers for ads personalization or ads measurement. We do not use mobile app data to track users across apps or websites owned by other companies.
6. Data Security
We implement administrative, technical, and physical safeguards to protect information, including encryption in transit and at rest, access controls and least privilege, network security, secure development practices, logging and monitoring, and incident response procedures.
No system is completely immune to risk. If you suspect unauthorized access or a data security issue, contact us immediately through the support portal or at support@killerwarehouse.com.
6.1 QuickBooks Online Data Retention and Deletion
QuickBooks-related data is stored only as long as necessary to provide services. You may disconnect ORCA from QuickBooks Online at any time, and we will cease further data access. You can request data deletion by contacting us.
6.2 Amazon Data Retention and Deletion
We retain Amazon customer personally identifiable information only as long as necessary to perform enabled services and in accordance with Amazon policies. Unless a longer retention period is required by law, we delete Amazon customer PII no later than 30 days after order delivery. Amazon PII is used only for permitted operational purposes, such as fulfilling orders, calculating and remitting taxes, producing legally required documents, and meeting legal requirements.
Upon revocation or disconnection from Amazon, we cease further data access. Subject to legal obligations and backup cycles, we delete or anonymize stored Amazon PII. At no point should Amazon PII be transmitted or stored unprotected.
6.3 Shopify Data Retention and Deletion
Shopify data is retained only as long as necessary to provide enabled services, maintain business records, satisfy legal obligations, and support merchant operations. When a merchant disconnects Shopify, uninstalls an app, or submits a valid deletion request, we stop further collection and delete or anonymize retained Shopify personal data subject to legal obligations, security needs, and backup cycles.
ORCA supports Shopify privacy compliance processes, including responding to Shopify privacy webhooks or equivalent requests for customer data access, customer data deletion, and shop data deletion.
6.4 Mobile App Retention and Account Deletion
Mobile app data is retained only as long as necessary to operate ORCA, maintain security, comply with law, and support the business workflows enabled by your organization. If the mobile app allows account creation or account access, you may request account deletion and associated data deletion through the support portal, at support@killerwarehouse.com, or through any deletion flow made available in the app or website. Some records may be retained where necessary for security, fraud prevention, legal compliance, audit logs, transaction history, or legitimate business records.
7. Your Privacy Rights
You may have the right to access, update, correct, delete, or request information about personal information, depending on your location. You may also disconnect third-party integrations at any time.
We do not sell or share personal information as those terms are defined by applicable U.S. state privacy laws. We use sensitive personal information only to provide services and for security or integrity purposes.
Merchants, users, and customers may submit privacy requests by contacting us. For Shopify-related requests, merchants and customers may also use Shopify's privacy request mechanisms where available. For mobile app accounts, account deletion requests may be submitted through the app or website if available, or by contacting us directly.
8. Children's Privacy
Our services are not directed to children and we do not knowingly collect personal information from children under 13, or under 16 where required by law. If you believe a child has provided personal information, contact us so we can delete it.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated date.
10. Contact Us
If you have questions or concerns about this Privacy Policy, contact us through the support portal, at support@killerwarehouse.com, or at (435) 612-0363.
Mailing Address: ATTN: ORCA - Killer Warehouse, 940 W 1400 N, Logan, UT 84321