Privacy Policy

1General

This Privacy Policy describes how ORCA Legal Labs Ltd. ("ORCA", "the Company", "we") collects, uses, and protects personal information provided to us through our website and services.

Use of ORCA services constitutes agreement to this Privacy Policy. If you do not agree to the terms set forth below, please refrain from using the services.

2Information We Collect

2.1 Information You Provide

• Registration details: name, email address, phone number
• Business information: firm name, attorney license number (if applicable)
• Legal content: case facts, party details, uploaded documents
• Payment information: credit card details processed through secure payment providers

2.2 Automatically Collected Information

• IP address and approximate geographic location
• Browser type and operating system
• Usage patterns on the website and service
• Information from cookies and similar tracking technologies

3How We Use Information

We use the collected information for the following purposes:

• Providing the service and generating legal documents
• Improving and developing the service
• Communicating with you regarding your account and the service
• Complying with legal and regulatory requirements
• Preventing fraud and misuse of the service
• Statistical and research analysis in an aggregate and anonymous manner

4Sharing Information with Third Parties

We do not sell or rent personal information to third parties. We may share information in the following cases:

• Service providers: cloud storage, payment processing, and technical support providers acting on our behalf
• AI processing: your case content is processed by third-party AI models (OpenAI, Anthropic) for document generation, under their standard API terms. This content is not used to train models and is subject to those providers' published retention and use policies (auto-deleted within 30 days).
• Legal requirement: in response to a court order, legal proceeding, or requirement of a competent authority
• Protection of rights: to protect our rights, property, or user safety
• Business transfer: in the event of a merger, acquisition, or sale of assets

5Data Security

We implement industry-standard security measures to protect your information:

• Data encryption in transit (TLS/SSL) and at rest
• Strict access controls
• Ongoing security monitoring
• Encrypted backups

Despite our efforts, absolute protection against breaches cannot be guaranteed. We commit to notifying you in the event of a security incident affecting your information, in accordance with legal requirements.

6Data Retention

We retain your personal information as long as your account is active or as required to provide the service. After termination:

• Legal content (documents, input, output) is deleted within 30 days of account closure. Download your files before then.
• Accounting information is retained as required by law (up to 7 years)
• Aggregate and anonymous data may be retained for research and improvement purposes

7User Rights

In accordance with the Privacy Protection Law, 5741-1981, you have the following rights:

• Right of access: to view the information stored about you
• Right of correction: to correct incorrect or inaccurate information
• Right of deletion: to request deletion of your information (subject to legal limitations)
• Right of objection: to object to processing of information for marketing purposes

To exercise your rights, contact us at privacy@orca.co.il

8Cookies

We use cookies and similar technologies for the following purposes:

• Essential cookies: required for basic website functionality
• Performance cookies: to analyze website usage and improve it
• Functional cookies: to remember your preferences

You can manage your cookie preferences through your browser settings.

9Changes to Policy

We may update this policy from time to time. Material changes will be published on the website and/or sent by email to registered users. Continued use of the service after publication of changes constitutes agreement to the updated policy.

10Contact Us

For questions, requests, or complaints regarding this Privacy Policy: