Privacy policy

Effective 21 September 2026

Orca uses only the information needed to create a scheduling link and coordinate a meeting. It does not sell personal data.

What this policy covers

This policy covers the Orca website, scheduling service, and the “Orca: Find time” Chrome extension.

Information Orca processes

• Your verified email address and basic Orca account information.
• The To and Cc recipient email addresses and subject of the Gmail draft where you click “Find time.”
• The meeting title, proposed times, duration, time zone, participants, availability responses, and booking status.
• Google Calendar free/busy results and, when you grant event access, event titles and times used to show your private Calendar view. Orca does not show your calendar details to other participants.
• Google OAuth tokens needed to access the permissions you grant. Tokens are stored encrypted on Orca's server.

The extension does not read the email body or Bcc recipients. It does not send email. You review and send the Gmail message yourself.

How information is used

Orca uses this information only to authenticate users, show their private Calendar view, create and share scheduling links, calculate mutual availability, create the agreed Google Calendar event when authorised, prevent abuse, and operate and secure the service.

Storage and sharing

Draft recipient and subject information is held temporarily in Chrome session storage while the Orca popup is open. Meeting and account data is stored in Orca's service infrastructure. Orca uses service providers necessary to operate the product, including Google and Supabase, and may disclose information when required by law. Orca does not sell personal data or use it for advertising, creditworthiness, or unrelated purposes.

Your choices

You can choose not to connect Google Calendar and select availability manually. You can revoke Google access from your Google Account and contact Orca to request access to, correction of, or deletion of your account information.

Security and retention

Orca uses access controls, encrypted connections, and encryption for stored Google credentials. Information is retained only as long as reasonably needed to provide and secure the service or meet legal obligations.

Changes

Material changes will be reflected on this page with a revised effective date.

Contact

For privacy questions or requests, email [email protected].