Legal and Compliance
Transparency, trust, and clarity
- UK GDPR
- ICO Registered
- Orca desktop: data stays in your systems
- OMG Center Limited · Company No. 14169551
Orca is built on a straightforward principle: your data is yours. OMG Center Limited builds and configures the software. For the Orca desktop app, your operational data, the emails, calendars, meetings, and contacts that Orca works with, lives entirely within your own systems and never touches ours. The documents below set out how this works in practice, and what you can expect from us in terms of service, security, and compliance. Orca Time, our hosted time tracker, works differently and has its own legal set further down this page.
Data Protection Policy
How we handle the minimal personal data collected through the Orca commercial relationship, and our position under UK GDPR.
Data Processing Agreement
Our formal position on data processing. Clients own and control all their operational data. OMG Center is not a data processor for that data.
Information Security
How the Orca application is designed to keep your data secure, including credential storage, API key management, and OS-level protections.
Data Map
A clear account of how data flows through the Orca system: what connects to what, where data lives, and what OMG Center can and cannot access.
Service Level Agreement
Our service commitments: response times, support availability, update cadence, and how we handle incidents affecting the Orca application.
Business Continuity
How Orca is architected for resilience, what happens in the event of a service disruption, and how your data remains accessible throughout.
Client Licence Agreement
The terms under which Orca is licensed to you: permitted use, configuration scope, intellectual property, and the nature of the service relationship.
Orca Time
Orca Time is our Mac menu bar time tracker with a hosted web dashboard at time.simmance.ai. Because it is hosted, its legal position differs from the Orca desktop app: your organisation's tracked time is stored in an EU database (AWS Frankfurt) operated by OMG Center Limited as a data processor on your behalf. The four documents below cover Orca Time specifically.
Orca Time: Data Processing Agreement
Your organisation as controller, OMG Center as processor. EU hosting in Frankfurt, per-organisation isolation, sub-processors, breach notification, and deletion on termination.
Orca Time: Privacy Notice
What is captured and never captured, lawful basis, the paused and blocked honesty model, who sees what by role, retention, and your rights.
Orca Time: Information Security
Security by architecture: owner-only row-level security, a security-definer read API as the sole cross-user path, structural operator redaction, and adversarial testing.
Orca Time: Licence Agreement
Per-organisation licensing with a fixed seat allowance, provisioned and invoiced by the publisher, validated via Keygen, with suspension stopping all sync.