Privacy Policy

Last updated: May 12, 2026

Orca is a Chrome extension that lets you ask AI questions in any comment section. This document explains exactly what we collect, what we use it for, and what we don't do with it.

We do not use your conversations to train AI models. This is core to how Orca is built — your messages are processed to serve your request and improve service reliability, but they are never fed into model training. We never sell your data.

1. Information We Process

When you use Orca, we process the following:

Account data — your email address and (for OAuth sign-ins) your name and profile picture. Used to identify you across devices and send service-related notifications.
Interaction data — the questions you ask Orca, the responses generated for you, and limited context from the page where you invoke Orca (the post you're asking about, the URL). Used to provide the service you requested, maintain reliability, and detect abuse.
Usage metadata — model used, token counts, request timing, platform (Twitter / Reddit / etc). Used for quota enforcement, billing, and operational analytics.
Payment information — handled entirely by Stripe. We do not receive or store credit card numbers. We retain only the Stripe customer / subscription identifier and your subscription status.
Technical data — auth cookies (set by Supabase Auth on this domain) to keep you signed in. We do not use third-party advertising or tracking cookies.

2. How We Use Information

To deliver the service you've requested (route your question to the AI model, return the answer).
To maintain reliability and quality (debug errors, review edge cases).
To detect and prevent abuse (spam, harassment, automated misuse).
To bill you correctly if you subscribe to Pro.
To send transactional emails (receipts, trial-ending reminders, payment failures, account changes). We do not send marketing emails without your opt-in.

3. AI Processing & Third-Party Sub-Processors

To deliver Orca's AI features, the content of your question (including any context Orca scrapes from the page) is sent to third-party AI providers for processing:

Google Gemini API — for text and image generation. Google's processing of your inputs is governed by Google's terms. Google does not train its consumer models on Gemini API requests sent through paid keys.
Supabase — hosts our database (Postgres), authentication, and serverless functions.
Vercel — hosts this website (pingorca.com).
Stripe — processes subscription payments.

These providers act as sub-processors and are bound by their own privacy policies and data processing agreements.

4. Where Your Data Is Stored

Your account and usage data are stored in the United States (Supabase, region us-east-1). If you access Orca from outside the US, your data is transferred to and processed in the US.

5. Retention

Active accounts — your data is retained for as long as your account exists.
Deleted accounts — when you delete your Orca account, all associated records (profile, interaction history, usage logs, referral data) are permanently removed within 30 days.
Payment records — Stripe retains transaction records independently of us per their own retention requirements.

6. Your Rights & Controls

You can:

Review your account at any time via the Orca extension's account dropdown.
Export or delete your interaction history (contact us at support@pingorca.com — we'll respond within 14 days).
Cancel your subscription at any time from the Stripe billing portal (linked from the account dropdown).
Delete your account entirely, which permanently removes all associated data within 30 days.

EU/UK users: you have additional rights under GDPR, including the right to access, correct, or object to processing. Contact support@pingorca.com to exercise these rights.

7. Children's Privacy

Orca is not directed at children under 13. We do not knowingly collect data from children under 13. If we learn that we have, we will delete it.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-product notice with at least 14 days' notice before they take effect. The "last updated" date at the top of this page reflects the current version.

9. Contact

Questions or requests? Email support@pingorca.com.