Privacy Policy
Privacy Policy
HeyOrca Inc. (“HeyOrca”, “we”, or “us) is committed to protecting your privacy. We own and operate the website located at www.heyorca.com (“Website”) and provide our online social media management platform (“Platform) and other related products and services, as described on the Website (together with Website and Platform, “Services”).
This privacy policy (“Privacy Policy”) describes how we collect, store, use, and distribute your information, including personally identifiable information about an individual (“Personal Information”), via the Services. Please read the following carefully to understand our practices regarding Personal Information of our users, customers, and prospective customers (“User”, “you”, “your”).
We may change this Privacy Policy from time to time at our sole discretion. We encourage you to review this Privacy Policy each time you use the Services to see if the Privacy Policy has been changed, as indicated by the “Last Updated” date set out above. HeyOrca may require you to provide consent to the updated Privacy Policy before further use of the Services is permitted.
- 1. Privacy Practices of HeyOrca Customers. Please note that we may indirectly receive information (including Personal Information) about you from an enterprise that is a HeyOrca customer. This Privacy Policy does not apply to such an enterprise’s collection, use, and disclosure of Personal Information about their end users, employees, or customers. Enterprises may be subject to different privacy requirements and obligations that govern how they collect, use, and disclose your Personal Information. We encourage you to read the privacy policy of your enterprise or contact their privacy officer to understand how your Personal Information may be collected, used, and disclosed by them.
- 2. Consent. By using the Services, you consent to the collection, use and disclosure of your Personal Information as described in this Privacy Policy. Except as set forth in this Privacy Policy, your Personal Information will not be collected, stored, used, or disclosed for any other purpose without your consent. We will not actively collect Personal Information for the purpose of sale or marketing of such Personal Information in a way that specifically identifies an individual. You may withdraw your consent to our processing of your Personal Information at any time. However, withdrawing consent may result in your inability to continue using all or part of the Services.
- 3. Information Provided to Us. We may collect Personal Information disclosed to us as follows:
- a. By Submitting Information via the Website. You may choose to provide us information when you use the Website. For example, you may submit information to us on the Website to register for a Platform demo. The Personal Information we collect includes your name, email address, and any other Personal Information you choose to submit to us via the Website. We ask that you do not disclose any sensitive Personal Information (including, without limitation, medical information) when you submit information to us.
- b. By Submitting Content via the Platform. You may submit and make available content via the Platform (“Content”). Any Personal Information contained in Content will be subject to the terms of this Privacy Policy. We ask you not to disclose sensitive Personal Information (including, without limitation, medical information) in any Content you choose to submit to us.
- c. Third-Party Integrations. We may integrate with or rely on third-party platforms and services to provide the Services to you (“Third-Party Integrations”). Any Personal Information submitted to us via Third-Party Integrations that we can access will be subject to this Privacy Policy, but please note that such Personal Information will also be subject to the terms of the applicable Third-Party Integration. Please consult the relevant third party’s privacy policy to see how they process your Personal Information.
- d. By Contacting Us. You may submit Personal Information to us when you contact us via the Website. We also provide links to our social media accounts on the Website, and you may choose to contact us there. Any Personal Information you submit to us via the Website or our social media accounts when you contact us will be processed in accordance with this Privacy Policy, but please note that the applicable social media platform may have access to your Personal Information. Please consult the relevant social media platform’s privacy policy to see how they process your Personal Information.
- e. By Applying to Work with Us. If you would like to work with us and submit hiring materials to us (either directly or through a Third-Party Service or recruiter), we collect any Personal Information in your hiring materials, such as your resume, cover letter, transcripts, or certifications. If you submit hiring materials to us, we ask you to only include information relevant to the position you’re applying for, such as your employment history and education (including, without limitation, certifications and/or degrees obtained, previous work experience, relevant awards, etc.). Please note that any Personal Information you submit through a Third-Party Service or recruiter will be subject to the privacy practices of those entities. If you are a current HeyOrca employee, please contact the HeyOrca Privacy Officer per Section 12 below for more information on how your employee information may be collected, stored, used, and distributed.
- 4. Information We Collect When You Use the Services.
- a. Cookies. When you use the Services, we may collect certain information through technologies such as cookies and other automatic data collection technologies (“Cookies”). We may use Cookies for authentication and to compile aggregate statistics about usage of the Services, such as how long Users spend using the Platform, and what parts or pages of the Website are viewed most often. This information is used to improve the content and operation of the Services. We may also use Cookies to promote the Services through marketing and advertising. These Cookies may be accessed or disclosed to third parties for the purpose of serving you relevant advertisements. You may opt out of Cookies or prevent third-party websites from accessing our Cookies by adjusting your privacy settings on your browser. However, opting out of Cookies may disable some features of the Services and may prevent us from providing you with the information and services you have requested.
- b. Device and Location Information. When you use the Services, we may collect information about your device (“Device Information”). Some Device Information, such as unique device identifiers, may constitute Personal Information. The Personal Information we collect from Device Information can depend on the individual settings of the device you use to access the Services. We recommend checking the policies of the device manufacturer to learn about what Device Information may be shared with us. You may disable the sharing of Device Information, but doing so may disable some features of the Services and may prevent us from providing you with the information and services you have requested.
- 5. How We Use Information We Collect. We use Personal Information in the following ways:
- To authenticate and onboard you, and provide you access to the Services;
- To provide, maintain, improve, and enhance the Services;
- To develop new HeyOrca products, features, and services;
- To communicate with you, provide you with updates and other information relating to the Services, provide information that you request, respond to comments and questions, and otherwise provide customer support;
- For marketing and advertising purposes, such as developing and providing promotional and advertising materials that may be relevant, valuable, or otherwise of interest to you, where you have subscribed to receive them;
- To find and prevent fraud, and respond to trust and safety issues that may arise;
- For compliance purposes, as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
- For other purposes for which we provide notice and obtain your consent at the time the Personal Information is collected.
- 6. Who We Share Your Information With. We may share your Personal Information with our employees, contractors and with third parties, such as selected business partners, suppliers, or sub-contractors, while performing our contractual obligations. These third parties may include web hosting partners, IT service providers, and advertisers.
- We have put in place contractual and other organizational safeguards with such third parties to protect your Personal Information from unauthorized uses and disclosures. Such third parties have limited access to Personal Information solely for the purposes described herein, and they will be subject to contractual restrictions prohibiting them from using such Personal Information for any other purpose.
- In addition, we may disclose your Personal Information to third parties:
- a. In connection with a corporate re-organization, a merger or amalgamation with another entity, or a sale of all or a substantial portion of our assets or shares, including any due diligence exercise carried out in relation to the same, provided that the Personal Information disclosed continues to be used for the purposes permitted by this Privacy Policy by the entity acquiring the Personal Information;
- b. If we have reason to believe that disclosing this Personal Information is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference with (either intentionally or unintentionally) our rights or property, other Users, or anyone else (including the rights or property of anyone else) that could be harmed by such activities; or
- c. If we believe in good faith that such disclosure is required by and in accordance with the law.
- Our servers and those of third parties who may receive your Personal Information may be located outside of Canada. Accordingly, your Personal Information may be available to foreign governments or their agencies under a lawful order, irrespective of the safeguards we have put in place for the protection of your Personal Information.
- Please note our use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements. We use YouTube API Services as a service provider, and if you use these services through the Website, you are subject to the Google Privacy Policy, located at Privacy & Terms – Google, and Youtube Terms of Service. We may share information that does not identify you (including information that has been aggregated or de-identified) except as prohibited by applicable law.
- 7. Third Parties. The Services may contain links to third-party websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to the collection, storage, use, and disclosure of your Personal Information by such third parties.
- 8. Data Retention and Deletion. We will keep your Personal Information for as long as it remains necessary for the identified purpose or as required by law, which may extend beyond the termination of our relationship with you. All retained Personal Information will remain subject to the terms of this Privacy Policy. You have the right to ask us to remove your Personal Information from our databases, and we will do so to the best of our ability, but it may not be possible to completely delete all of your Personal Information due to technological and legal constraints (for example, when your Personal Information pertains to another User).
- If you have authorized us to access your data via the YouTube API Services, then in addition to our normal procedure for deleting stored data, you may revoke our access to your data via the Google security settings page, located at Sign in - Google Accounts.
- 9. Access and Accuracy. You may access the Personal Information we hold about you to verify accuracy of your Personal Information, to have a general account of our uses of your Personal Information, and to correct your Personal Information as appropriate. Upon receipt of your written request, we will provide you with a copy of your Personal Information although in certain limited circumstances, we may not be able to make all relevant Personal Information available to you (for example, where that Personal Information also pertains to another User). In such circumstances, we will provide reasons for the denial to you upon request. We will make every reasonable effort to keep your Personal Information accurate, and to respond to your in a timely manner.
- 10. Security. We use commercially reasonable efforts to store and maintain your Personal Information in a secure environment. We take technical, contractual, administrative, and physical security steps designed to protect Personal Information that you provide to us. We have implemented procedures designed to limit the dissemination of your Personal Information to only such designated staff and third parties as reasonably necessary to carry out the stated purposes we have communicated to you.
- 11. Additional Disclosures for Residents of the EEA and California.
- a. Residents of the European Economic Area (“EEA”), United Kingdom, or Switzerland. If you are a resident of the EEA, you may have certain additional data protection rights mandated by the laws of your jurisdiction. Users located in the EEA, UK, or Switzerland who wish to exercise these rights should contact the HeyOrca Privacy Officer using the contact information below in Section 12. We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). Note that where we act as the data processor, you may be required to contact the data controller directly to exercise your rights. For more information on your privacy rights, you may contact your local data protection authority in the EEA, UK, or Switzerland.
- b. Residents of California. If you are a resident of California, you may have certain rights under the California Consumer Privacy Act (the CCPA). Subject to certain limitations, the CCPA provides California consumers the right to request to know more details about the categories or specific pieces of Personal Information we collect (including how we use and disclose this Personal Information), to delete their Personal Information, to opt out of any “sales” of Personal Information that may be occurring, and to not be discriminated against for exercising these rights.
- For more details about the Personal Information HeyOrca has collected from you over the last 12 months, please see Sections 3 and 4 above. We collect this Personal Information for commercial purposes described in Section 5 above. HeyOrca does not sell (as that term is defined in the CCPA) the Personal Information we collect.
- California consumers may make a request pursuant to their rights under the CCPA by contacting the HeyOrca Privacy Officer at support@heyorca.com. We will verify your request using the information associated with your account, if available, including email address. Government identification may be required. Consumers can also designate an authorized agent to exercise these rights on their behalf.
- 12. Contact Us. If you want to enforce any of your rights under this Privacy Policy or if you have any questions regarding this Privacy Policy or your Personal Information, please contact our Privacy Officer per the information below:
- a. Via email: Email us at support@heyorca.com using the subject line “Re Privacy Policy”.
- b. Via mail: Mail us correspondence to CP 25071 BP VILLENEUVE, 4547 Boul Saint-Laurent, Montreal, QC H2T 1R2