Orcana.AI Privacy Policy

Last Updated: October 28, 2026
Effective Date: August 14, 2024

At Orcana, Inc. (“Orcana,” “we,” “our,” or “us”), we are committed to protecting the privacy and security of individuals and organizations (“you” or “user”) who access our websites, applications, platforms, and related services (collectively, the “Services”).

This Privacy Policy explains how we collect, use, protect, and share personal data, and outlines your rights and choices. As used in this Policy, “Personal Data” means information that identifies or can reasonably identify you, such as your name, contact details, or other information linked to your identity.

By using our Services, you agree to the terms of this Privacy Policy. If you have questions or concerns, please see Section 12 (“How to Contact Us”).

Consent

By submitting Personal Data through our Services, you consent to our collection, use, and disclosure of that information as described in this Privacy Policy. If you do not agree, please discontinue use of our Services.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make material changes, we will post a clear notice on this page with an updated effective date. If required by law, we will notify you directly. Continued use of our Services after such updates signifies your acceptance of the revised Policy.

Children Under 13

Our Services are not directed toward children under 13, and we do not knowingly collect Personal Data from them. If we learn that such data has been collected, we will promptly delete it.

International Data Transfers

Your Personal Data may be transferred to and processed in the United States or other jurisdictions where Orcana and its affiliates operate. These locations may have different data protection laws than your country of residence. By using our Services, you consent to such transfers, provided that we ensure appropriate safeguards and compliance with applicable regulations (e.g., GDPR Standard Contractual Clauses).

Types of Data We Collect

5.1 Personal Data You Provide

We collect information you voluntarily provide, such as:

• Details submitted via web forms (e.g., demo requests, sign-ups, event registrations).
• Communications sent via email, chat, or feedback forms.
• Information shared in connection with job applications or partnerships.

5.2 Automatically Collected Data

When you interact with our website or Services, we automatically collect certain data, including:

• IP address, browser type, operating system, and device identifiers.
• Time zone, referring URLs, usage activity, and interactions.
• Analytics and engagement metrics via cookies, pixels, and analytics tools (e.g., Google Analytics).
• Anonymous visit counts via Cloudflare Web Analytics, which uses no cookies and does not identify you.

You may opt out of analytics tracking through browser settings or available opt-out tools.

5.3 Data from Third Parties

We may receive information from trusted business partners, event organizers, or public databases (e.g., joint marketing campaigns or conference interactions).

5.4 Anonymous or De-Identified Data

We may create aggregated or de-identified data that cannot reasonably identify an individual. This data is used for analytics, benchmarking, and service improvement.

5.5 Visitor Identification

We use a visitor identification service (RB2B) to understand which companies visit our website. For visitors in the United States, this service may also match your visit to business contact details it holds, such as your name, job title, company, business email and LinkedIn profile, along with the pages you viewed. For visitors in the United States it runs unless you choose “Decline”; for visitors everywhere else it runs only if you choose “Accept”. We use this only to follow up on business interest in Orcana and never sell it.

You can opt out at any time: choose “Decline” in our cookie banner, or “Cookie preferences” in the site footer. To have any record of your visit deleted, email privacy@orcana.ai.

How We Use Your Data

6.1 General Use

We use Personal Data to:

• Deliver and operate our Services.
• Respond to support and information requests.
• Provide administrative or service-related communications.
• Send updates, newsletters, and event information (with opt-out options).
• Personalize your experience and remember preferences.
• Improve, audit, and secure our systems.
• Generate analytics and de-identified insights.
• Comply with applicable legal and contractual obligations.

You may withdraw consent for marketing communications at any time by following the “unsubscribe” link in our emails or contacting us directly.

6.2 Anonymous Data

Aggregated or anonymized data may be used for internal research, performance analysis, or to enhance Orcana’s AI-driven analytics capabilities—without identifying individuals or customers.

6.3 Feedback

Any feedback, suggestions, or ideas you submit may be used to enhance our Services, subject to this Privacy Policy.

Disclosure of personal data

We only share Personal Data under the following conditions:

Affiliates

We may share data with our affiliates and subsidiaries that adhere to this Privacy Policy.

Change of Control

In the event of a merger, acquisition, or reorganization, Personal Data may be transferred to the successor entity, subject to the same protections.

Legal Obligations

We may disclose Personal Data if required to comply with laws, regulations, or government requests, or to protect the safety, rights, or property of Orcana, our users, or the public.

Service Providers

We engage vetted third-party service providers for hosting, analytics, customer support, and marketing. They are contractually obligated to process data only as instructed and to maintain appropriate security standards.

Marketing

Orcana does not sell or share Personal Data with third parties for their independent marketing purposes without your explicit consent.

Social Media and External Links

Our website may include links to social media or external websites. Information shared via those platforms is governed by their own privacy policies, not ours.

Your rights and choices

Communication Preferences

You may unsubscribe from promotional emails at any time. Transactional and service-related communications will still be sent when necessary to operate your account or fulfill contractual obligations.

Access, Correction, and Deletion

You may request access to, correction of, or deletion of your Personal Data by contacting us at privacy@orcana.ai.

Where applicable (e.g., GDPR, CCPA), we will honor your rights to data portability, erasure, and restriction of processing.

Data security

We maintain rigorous technical and organizational safeguards to protect Personal Data against unauthorized access, alteration, disclosure, or destruction. This includes:

• AES-256 encryption at rest and TLS 1.2+ encryption in transit.
• Role-based access controls and multi-factor authentication.
• Continuous monitoring and audit logging.
• Annual third-party penetration testing and security assessments.

While no system is completely secure, we continuously enhance our controls to align with industry best practices and compliance frameworks.

Data retention

We retain Personal Data only as long as necessary to fulfill the purposes described in this Policy, comply with legal requirements, or enforce our agreements.

Residual copies may remain in encrypted backups but are inaccessible for active processing.

Do not track

Our website does not currently respond to “Do Not Track” browser signals due to the absence of a standardized industry protocol.

How to contact us

By Email: info@orcana.ai
Orcana-AI, Inc. 1111B S Governors Ave STE 21776 Dover, DE, 19904 US

Dispute resolution

If you believe that Orcana has not adhered to this Privacy Policy, please contact us first at privacy@orcana.ai. We will investigate and respond promptly.

If you remain unsatisfied, you may have the right to contact your regional data protection authority or privacy regulator.

We never expose raw client data.
✓ All data is encrypted and processed securely.
✓ No customer data is used for model training.
✓ Every insight generated is traceable and auditable.