Store Integration
Orca supports integrating with multiple payment stores to track purchases, subscriptions, and deliver real-time entitlement synchronization across all platforms from a single API.
Supported Stores
Section titled “Supported Stores”Orca provides native support for four primary payment platforms:
- Apple App Store Connect - For iOS and macOS applications
- Google Play Store - For Android applications
- Stripe - For web and custom payment flows
- GoCardless - For bank-to-bank direct debit payments
How Store Integrations Work in Orca
Section titled “How Store Integrations Work in Orca”graph LR subgraph "App Stores & Gateways" A[Apple App Store] G[Google Play Console] S[Stripe] GC[GoCardless] end
subgraph "Orca Engine" O[Orca Webhook Ingestion Engine] V[Cryptographic Receipt & Signature Verification] E[Unified Entitlements Manager] end
subgraph "Your Apps & Backend" App[iOS / Android / Web / Desktop App] DB[(Your Database / Webhooks)] end
A -->|StoreKit 2 Server Notification| O G -->|Cloud Pub/Sub RTDN| O S -->|Stripe Webhooks| O GC -->|Direct Debit Webhooks| O
O --> V --> E E -->|Sub-10ms Edge SDK Sync| App E -->|Normalized Webhook Stream| DB1. Unified Entitlements
Section titled “1. Unified Entitlements”Regardless of which store a customer uses to purchase (Apple, Google Play, Stripe, or Direct Debit), Orca resolves the transaction into a single unified entitlement tier (e.g. pro_tier, enterprise_tier). Your client applications only need to check orca.entitlements.has("pro_tier").
2. Zero Revenue Cut
Section titled “2. Zero Revenue Cut”Unlike traditional subscription wrappers that take a 1% gross cut of every transaction across all connected stores, Orca operates on a predictable flat-rate model ($0 Free tier, $299 Flat Pro tier) with 0% revenue tax.
3. Server-Side Cryptographic Validation
Section titled “3. Server-Side Cryptographic Validation”All transactions are verified server-to-server:
- Apple purchases are decoded and verified using official Apple JWS root certificates.
- Google Play transactions are polled directly via Google Play Developer API v3 using Google Cloud Service Accounts.
- Stripe events are validated against the endpoint signing secret.
- GoCardless mandate events are verified using cryptographic signatures.
Getting Started with Store Setup
Section titled “Getting Started with Store Setup”Follow the dedicated guide for each store to connect your credentials and configure webhooks:
- Apple App Store Setup — Generate App Store Connect API keys (
.p8), Issuer ID, Key ID, and configure App Store Server Notifications v2. - Google Play Store Setup — Configure Google Cloud Pub/Sub topics, create a Service Account with financial permissions, and connect Real-Time Developer Notifications.
- Stripe Setup — Connect Stripe API Secret keys and register the Orca webhook destination endpoint.
- GoCardless Setup — Link your GoCardless access token, webhook secret, and enable automated mandate synchronization.