Privacy Policy
- Effective
- October 6, 2026
- Last updated
- October 6, 2026
Orca Athalyx Intelligence LLC (“Orca Athalyx Intelligence,” “Othalyx,” “Orca,” “we,” “us,” or “our”) develops research, frameworks, products, and applied systems focused on the space between artificial intelligence output and human judgment.
Privacy is part of how we think about responsible intelligence. This Privacy Policy explains what information we collect, why we use it, when we share it, how long we retain it, and the choices available to you.
This Policy applies to othalyx.com, communications with Orca, research participation, business development, events, collaborations, and Orca services that link to this Policy.
Some products developed or operated by Orca, including Bismillah.ai, may involve different types of information or different privacy considerations. Where a product provides its own privacy notice, that product-specific notice governs the use of information within that product.
1. Information We Collect
The information we collect depends on how you interact with Orca.
Information you provide directly
We may receive information such as:
- your name;
- email address;
- company or organization;
- job title or professional role;
- contact information;
- information you submit through forms;
- messages, inquiries, feedback, and correspondence;
- information you provide in connection with research, workshops, pilots, advisory work, or collaborations;
- documents or materials you choose to share with us; and
- billing or transaction-related information where applicable.
We ask that you avoid sending highly sensitive personal information through general website forms or ordinary email unless it is necessary and an appropriate process has been established for handling it.
Information collected when you use our website
Our website and infrastructure may automatically receive limited technical information, including:
- IP address;
- browser and device information;
- operating system;
- referring or exit pages;
- approximate geographic region derived from IP address;
- pages viewed and interactions with the website;
- timestamps;
- error, security, and diagnostic information; and
- cookies or similar technologies where used.
We may use privacy-conscious analytics to understand aggregate website performance and improve our services.
Information received from other sources
In appropriate business or research contexts, we may receive professional information from:
- your employer or organization;
- collaborators and business partners;
- publicly available professional sources;
- professional networks;
- event organizers;
- service providers; or
- other people who introduce or refer you to Orca.
Where required by law, we provide appropriate notice regarding information obtained from third parties.
2. How We Use Information
We may use personal information to:
Operate Orca
To operate, maintain, secure, and improve our website, systems, research infrastructure, and business operations.
Communicate with you
To respond to inquiries, schedule conversations, provide requested information, manage relationships, and communicate about projects or opportunities.
Deliver services and collaborations
To perform research, strategic work, product pilots, assessments, workshops, advisory engagements, or other services you or your organization request.
Conduct research
To develop, test, evaluate, and improve frameworks, methodologies, and approaches relating to AI, context, culture, behavior, human judgment, and decision-making.
Where research involves identifiable or sensitive information, additional consent, research terms, confidentiality obligations, or other safeguards may apply.
Develop and improve our systems
To understand how our methodologies, tools, and systems perform and where they can be improved.
Protect Orca and others
To detect abuse, prevent fraud, protect security, investigate incidents, enforce agreements, and protect the rights and safety of Orca, our collaborators, and others.
Meet legal and operational obligations
To maintain business records, comply with law, respond to lawful requests, manage accounting and taxation, and establish or defend legal claims.
Communicate about Orca
We may send relevant business, research, event, or company communications where permitted by law. You may unsubscribe from marketing communications at any time.
3. Artificial Intelligence and Automated Systems
Artificial intelligence is part of Orca’s field of work and may also support portions of our internal operations.
We may use AI-enabled or automated systems to assist with activities such as research, analysis, document preparation, information organization, evaluation, or operational workflows.
We design these uses around several principles:
- AI output should not automatically be treated as authoritative.
- Human judgment remains important for consequential decisions.
- Access to information should be proportionate to the task.
- Confidential or sensitive information should receive stronger controls than ordinary business information.
- Information should not be collected merely because it can be collected.
Unless specifically disclosed in connection with a particular service, Orca does not use automated decision-making to make decisions about individuals that produce legal or similarly significant effects without meaningful human involvement.
Where third-party AI or cloud services process information on our behalf, we seek to use them in accordance with applicable agreements, privacy commitments, access controls, and the sensitivity of the information involved.
We do not intentionally submit highly sensitive personal information or client-confidential material to publicly accessible AI systems for the purpose of training general-purpose AI models without authorization.
4. Legal Bases for Processing
Where laws such as the GDPR or UK GDPR apply, Orca processes personal information under one or more of the following legal bases:
Contract
Processing may be necessary to enter into or perform an agreement with you or your organization.
Legitimate interests
We may process information where reasonably necessary to operate our organization, conduct responsible business development, improve our services, protect our systems, communicate with professional contacts, or conduct appropriate research.
Consent
We may rely on consent where required, including for certain communications, research activities, or technologies.
Legal obligations
We may process information when necessary to comply with applicable law.
You may contact us if you would like more information about the legal basis applicable to a specific processing activity.
6. Sale and Targeted Advertising
Orca does not sell personal information for monetary consideration.
We do not operate a business model based on selling identifiable visitor information to data brokers.
If our practices change in a way that constitutes the “sale” or “sharing” of personal information or targeted advertising under applicable privacy law, we will update this Policy and provide the legally required choices before applying the new practice.
Where applicable law requires recognition of browser-based opt-out preference signals, such as Global Privacy Control, we will honor them as required.
8. Data Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected or for legitimate operational, contractual, security, legal, accounting, or compliance purposes.
Retention depends on factors including:
- the nature and sensitivity of the information;
- the duration of our relationship with you;
- whether an engagement remains active;
- applicable contractual obligations;
- legal or regulatory requirements;
- security considerations; and
- whether information is needed to establish or defend legal claims.
When information is no longer reasonably required, we may delete, anonymize, or securely archive it as appropriate.
9. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse.
Our safeguards may include measures such as access restrictions, authentication controls, encryption where appropriate, permission management, data minimization, vendor controls, monitoring, and internal governance.
No online system can be guaranteed to be completely secure. Accordingly, we cannot promise absolute security.
10. International Data Transfers
Orca operates in an international technology and research environment.
Your information may therefore be processed in countries other than the country where you live, including the United States.
Where required by applicable law, we use appropriate mechanisms or safeguards for international transfers of personal information.
11. Your Privacy Rights
Depending on where you live and which privacy laws apply, you may have rights relating to your personal information, including the right to:
- request access to personal information we hold about you;
- request correction of inaccurate information;
- request deletion;
- request restriction of certain processing;
- object to certain processing;
- receive certain information in a portable format;
- withdraw consent where processing is based on consent;
- opt out of certain marketing;
- opt out of certain sale, sharing, profiling, or targeted-advertising practices where applicable; and
- appeal certain privacy decisions where applicable law provides that right.
We will not discriminate against you for exercising a privacy right protected by applicable law.
To submit a privacy request, contact: info@othalyx.com
Please include enough information for us to understand and respond to your request. We may need to verify your identity before fulfilling certain requests.
Authorized agents may submit requests where applicable law permits.
12. California and Other U.S. State Privacy Rights
Residents of California and certain other U.S. states may have additional privacy rights if the applicable state privacy law applies to Orca.
These may include rights to know, access, correct, delete, or obtain personal information and to opt out of certain forms of sale, sharing, targeted advertising, or profiling.
Orca’s current business model is not based on selling personal information.
Where a state-specific notice, disclosure, appeal process, or method for exercising rights becomes legally required, we will make that information available through this website.
13. European Economic Area, United Kingdom, and Similar Jurisdictions
Where applicable data-protection law provides additional rights, you may also have the right to:
- object to processing based on legitimate interests;
- request restriction of processing;
- request data portability;
- withdraw consent without affecting prior lawful processing; and
- lodge a complaint with the appropriate data-protection authority.
We encourage you to contact us first if you have a privacy concern so we can attempt to resolve it.
14. Children’s Privacy
The Orca website and professional services are not directed toward children.
We do not knowingly use the Orca website to collect personal information from children in circumstances prohibited by applicable law.
Product-specific services operated by Orca may establish different age requirements and will provide their own terms and privacy notices where appropriate.
15. Third-Party Links
Our website may link to third-party websites, research, platforms, services, or products.
Orca does not control those third parties and is not responsible for their privacy or security practices. We encourage you to review their policies before providing personal information.
16. Business and Client Data
Where Orca processes information on behalf of an organizational client under a separate agreement, the client may determine the purposes and means of processing and Orca may act as a service provider or processor.
In those situations, the applicable client agreement, data-processing agreement, research agreement, or other written terms may govern the processing and take precedence over this general Privacy Policy where there is a conflict.
17. Changes to This Policy
Our work and our technology may evolve.
We may update this Privacy Policy from time to time to reflect changes in our practices, services, technologies, or legal obligations.
When we make material changes, we will update the “Last updated” date and provide additional notice where required by law.
18. Contact
Questions about this Privacy Policy or Orca’s privacy practices may be sent to:
Orca Athalyx Intelligence LLCEmail: info@othalyx.com
Website: othalyx.com