Privacy Policy

Last updated: 27 October 2026

Who runs Orca

Orca is a personal tool. Finn Formica runs it for his own use. Orca has no other users and no customers. Orca is not for sale.

What Orca does with Gmail

Orca asks Google for these scopes:

• openid and userinfo.email, to know which account signed in.
• gmail.readonly, to read and search mail.

Orca reads and searches mail only to answer its owner. Orca never sends mail. Orca never changes, deletes or labels mail. Orca never marks mail as read. Orca never shares mail with another person or company.

How Orca keeps your data

• Orca keeps the Google refresh token encrypted (AES-256-GCM) on a server that only its owner controls.
• Orca keeps access tokens in memory only.
• Orca does not sell data. Orca does not use data for advertisements.
• Orca does not use Gmail data to train AI or machine learning models.
• No person other than the owner reads the data.

Google API Services User Data Policy

Orca's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How to remove access

Remove Orca's access at any time at myaccount.google.com/permissions. Orca then cannot read mail. Disconnect in Orca also revokes the grant and deletes the stored refresh token.

This site

This site uses no cookies, no analytics and no tracking.

Contact

Send questions to finnformica@gmail.com.