Who is responsible
ORCA AI operates ORCA and is responsible for the personal information covered by this notice. The contact details below are available for privacy questions, rights requests and complaints. This notice covers our website, account and career services, and any optional connected-chat service when made available.
Information about your account
We process the details you provide for your account and verification, such as your name, email, date of birth, gender preference, interface language, account identifiers and verification status. A phone number may be supplied for verification or as a career-profile contact detail. University-email verification uses the address, domain and relevant eligibility information. Account gender preference is used for grammatical address, not to evaluate your career suitability.
Career information and sources
Career information includes your work and education history, qualifications, skills, contact details, assessment answers, preferences, uploaded documents, instructions, practice responses and the profiles, insights and documents produced for you. We obtain it from your entries and uploads, from imports you request, and from relevant job postings, professional profiles and company sources used for your requested service. Avoid submitting unrelated sensitive information or another person’s confidential material without permission.
Payment, support and technical information
We process orders, invoices, payment confirmations, service balances and delivery or recovery records. Payment providers process the payment details you give them. Support correspondence and technical information, such as connection information, browser requests, errors and security logs, help us operate the service, investigate issues and respond to you.
Why we use information
We use relevant information to manage and secure your account, verify eligibility, provide and personalize the career services you request, interpret your career evidence, research a supplied job or company, create and deliver documents, administer payments and service allowances, and provide support. AI-assisted interpretation and assessments help describe your strengths, preferences and career fit; ORCA does not make an employer’s hiring decision. If you use voice input, audio is processed for transcription and the resulting text can become part of your answers or profile.
Authorization and consent
Processing remains subject to the authorization required by applicable law, including prior consent where required and exceptions permitted by law. The purposes described here do not remove your consent rights. Reading this notice or accepting our terms is not a substitute for a specific consent required for a particular use or transfer. Contact us if you need to understand the basis for a particular use of your information or wish to withdraw consent.
Service providers and AI processing
External service providers support hosting and storage, account sign-in and verification, payments, AI generation and transcription, and job or company research. Relevant service inputs may therefore be processed by those providers, including career facts, uploaded content, job descriptions, answers, instructions and generated drafts. Providers may also hold their own account, security, transaction or processing records under their terms and privacy practices. Contact us about the providers, retention and model-training terms relevant to a particular feature or request.
Processing in other countries
Hosting, payment, identity and AI providers may process information outside your country, including outside Jordan. The location and arrangements depend on the service and provider used. Applicable restrictions and safeguards for international transfers still apply; this notice does not replace any specific consent or other requirement for a transfer. You can contact us for information about the providers and transfer arrangements relevant to your request.
Browser drafts and temporary editing contexts
An unfinished browser onboarding draft stays on its device and has a fixed seven-day window from the start of that run. Signing in does not automatically attach or upload it to your account, and later answers or visits do not restart that window. You can discard the draft or clear browser storage. Temporary profile editing and review drafts on our servers expire 30 minutes after the latest accepted change; simply reading or reopening one does not renew it. If a draft is linked to an unfinished onboarding journey through an optional ChatGPT connection, it cannot outlast that journey’s original seven-day window. These temporary copies are separate from your saved profile and other service records.
Saved records and deletion
Your saved profile, jobs and current documents remain available with your account until you remove them, replace the relevant content or delete the account. Records of requested operations, service use and payments support delivery, recovery and account history; no single fixed period covers every record. Contact us about a particular record or to request account deletion. Deletion includes account-owned career records and service entitlements through our identity and private-file cleanup processes, which may take time to finish. Files you downloaded or shared and records independently held by other providers are not automatically erased when your ORCA account is deleted.
Verification records after account deletion
To prevent reuse of one-time eligibility, ORCA retains keyed hashes of the phone number used to claim a free JobKit and a university-email address claimed for eligibility, including after account deletion. These are reuse-prevention records, not a statement that contact details never appear in a profile you supplied. Payment providers may separately retain transaction information under their own obligations.
Optional ChatGPT connections
If a ChatGPT connection is made available and you choose to use it, the information needed for your requested action passes through ChatGPT and ORCA’s processing providers. Connecting an account alone does not authorize storage of an unfinished onboarding journey. Where that storage is offered, a separate authenticated browser approval is required; its fixed seven-day window starts at draft creation and is not extended by answers, reads or reconnection. Successful profile completion, expiry or account deletion clears the transient journey content. You can also request that the draft be discarded. Unconfirmed job-source reviews in that connection expire 30 minutes after your last edit. Reading a review, reconnecting or finishing source processing does not restart that period. Once selected sources are confirmed for accepted preparation, that work follows its existing durable lifecycle; the temporary review period does not set a deadline for it.
Disconnection and other services’ records
Disconnecting an optional chat connection stops its future access. It does not by itself delete your ORCA account or cancel work already accepted. ORCA cannot delete historical messages retained by ChatGPT. The chat platform and other services have their own records, privacy notices and deletion controls; use those controls for information they hold independently.
Cookies and storage on your device
Cookies and similar browser storage support sign-in, session security, language and theme preferences, draft continuity and recovery of requested work. The ORCA service-session cookie can last up to 30 days, and its shared theme cookie up to one year; local language or theme choices may remain until cleared. Sign-in and payment providers may use their own cookies. You can manage cookies and local storage in your browser; blocking or clearing them can affect sign-in, preferences or unfinished work.
Your rights and choices
Your rights depend on the law that applies, including Jordan’s Personal Data Protection Law where applicable. They can include knowing about and obtaining a copy of your information, correcting or updating it, restricting processing, requesting erasure or concealment, objecting to processing or profiling, transferring a copy, withdrawing prior consent and being informed about a breach. Contact us using the details below and describe your request. We may need to verify ownership and explain any applicable legal exception. Exercising a mandatory right is not a reason to impose a penalty. Withholding information needed for a requested feature can make that feature impossible to provide.
Security
We use account access controls, ownership checks and private document delivery to protect information. No online system or transmission can be guaranteed completely secure. Keep your sign-in details private and contact us if you suspect unauthorized access. Breach notifications and other security duties remain subject to applicable law.
Questions, complaints and changes
Please email us about a privacy concern or request. You can also complain directly to a competent data-protection authority without our permission. In Jordan, the Personal Data Protection Directorate at the Ministry of Digital Economy and Entrepreneurship provides official information and services through its website. We may update this notice as our services or obligations change and show the updated date here. A new purpose requiring notice or consent is not authorized merely by changing this page.
Contact ORCA AI
ORCA AI
Office #12, Bldg 10, Tla'a el Ali, Amman 11953, Jordan