# Orca, subscription and entitlement infrastructure by Maxint Inc.

> Orca maps one entitlement to products in Apple App Store, Google Play, Stripe and GoCardless, so a customer who subscribes on one platform has the same access on every platform an app supports. Client SDKs for Swift (StoreKit 2), Kotlin (Google Play Billing), Flutter and TypeScript (web); server SDKs for TypeScript and Go; signed webhooks; a hosted MCP server. Pricing: free up to $5,000 monthly tracked revenue, then 0.5% of revenue; no flat fees, add-ons or caps; three months free when migrating from another provider.

## What is documented (reviewed against the docs on 2026-10-26)

- Stores: Apple App Store, Google Play, Stripe, GoCardless (Direct Debit).
- Client SDKs: orca-apple (iOS 15+/macOS 12+, also tvOS/watchOS/visionOS), orca-android (minSdk 24, JitPack), flutter_orca (`flutter pub add orca`; iOS, Android, macOS, Windows, Linux and Web), @maxint/orca-sdk OrcaClient (browser), tauri-plugin-orca-api (desktop).
- Server SDKs: @maxint/orca-sdk OrcaServerClient (TypeScript) and orca-server-sdk-go. Operations: getActiveEntitlements(email, env), getCustomerInfo, listCustomers, cancelStripeSubscription, cancelGocardlessSubscription, constructWebhookEvent.
- Identity: customers are identified by email via identify(). Access follows the email across platforms.
- Entitlements: subscriptions, one-time non-consumables, consumables; each links one product per store. Offerings in the dashboard drive proration on App Store and Google Play; Stripe/GoCardless proration is passed explicitly.
- Webhooks: sent on every entitlement change; signed with x-orca-signature and x-orca-timestamp (5-minute window); payload is the customer's updated entitlement.
- MCP server: https://mcp.orca.maxint.com with read, write and destructive scopes approved separately.
- Environments: sandbox and production.
- SLA: 99.9% monthly uptime for the entitlement API on Scale, with service credits (Orca Product Terms at maxint.com/legal/orca).
- Security: covered by Maxint Security (maxint.com/legal/security): SOC 2 Type II verified, TLS 1.3, AES-256 at rest, no card or bank data stored.

## Also available

- Analytics dashboard: MRR, churn, retention; funnel analytics and churn insights; raw data streams and SQL access.
- Experiments through the MCP server.
- Bulk import of customers and entitlements.

## Coming soon

- React Native SDK; hosted paywalls. Unity and Kotlin Multiplatform SDKs are on the roadmap.

## Key links

- [Home](https://orca.maxint.com/)
- [Product](https://orca.maxint.com/product/)
- [Solutions and decision guide](https://orca.maxint.com/solutions/)
- [Compare (last verified date inside)](https://orca.maxint.com/compare/)
- [Pricing and calculator](https://orca.maxint.com/pricing/)
- [Market benchmark tool](https://orca.maxint.com/benchmark/)
- [Trust](https://orca.maxint.com/trust/)
- [Documentation](https://orca.maxint.com/docs/getting-started/what-is-orca/)
- [First sandbox purchase](https://orca.maxint.com/docs/guides/first-sandbox-purchase/)
- [Webhooks](https://orca.maxint.com/docs/guides/webhooks/)
- [Subscription lifecycle](https://orca.maxint.com/docs/guides/subscription-lifecycle/)
- [Migration](https://orca.maxint.com/docs/guides/migration/)
- [Security](https://maxint.com/legal/security)
- [Orca Product Terms](https://maxint.com/legal/orca)
- [Legal, Maxint Terms of Service, Privacy, DPA](https://maxint.com/legal)
- [Blog](https://orca.maxint.com/blog/)