OrcaPilot privacy policy

Data we access, and why

Account identity (Google or Microsoft). When you sign in, we access your name, email address, and profile picture to create and secure your account. We do not receive or store your password; authentication happens entirely with your identity provider.

Google Calendar (only if you connect it). If you connect Google Calendar, OrcaPilot reads your calendar events to answer scheduling questions and to prepare proposed changes. It creates, updates, or deletes an event only after you approve a previewed action. We request calendar access separately from sign-in, and you can decline it while continuing to use the rest of the Service.

Gmail (only if you connect it). If you connect Gmail, OrcaPilot reads your email messages solely to build your inbox summary and to rank what needs your attention. We display summaries and priorities to you; we do not send email from your account, and we do not modify or delete your messages. Message bodies are processed to produce the summary and are not retained beyond what is needed to show it to you. We request Gmail access separately from sign-in, and you can decline or disconnect it at any time while continuing to use the rest of the Service.

Content you add. Documents and notes you put in your organization's knowledge base, and the messages you exchange with the agent, are stored to provide the Service.

How we use data

We use the data above solely to provide and secure the Service: to operate your account, to answer your requests, to take the actions you approve, and to maintain an audit log of those actions. We do not use your Google user data for advertising, and we do not use it to train machine-learning models.

Limited Use disclosure

OrcaPilot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we store and protect data

Data is stored in databases hosted in the United States. OAuth tokens for connected accounts are encrypted at rest with keys held separately from the database. Transport is TLS everywhere. Access to production systems is limited to personnel who operate the Service.

Sharing

We do not sell your data. We do not share Google user data with third parties, except with the infrastructure processors that host the Service (compute and database providers) as needed to operate it, or if the law requires disclosure. No human at OrcaPilot reads your Google user data except with your explicit permission for support, or as required for security investigations or legal compliance.

Retention and deletion

We keep your data while your account is active. Disconnecting an integration revokes our access and deletes its stored tokens. Deleting your account deletes your organization's stored data within 30 days, except records we must keep for legal or security reasons. You can also revoke OrcaPilot's access at any time from your Google account permissions page.

Contact

Questions about this policy or your data: privacy@orcapilot.ai. We will update this page when the policy changes and note the new effective date above.