Privacy & Sandboxing Policy
Effective Date: June 12, 2026 · Orcamatic (orcamatic.com)This Privacy Policy explains how Orcamatic (“we”, “us”, or “our”) protects and sandboxes data for the ORCA Chrome Extension, our cloud automation service, and the official website at orcamatic.com. ORCA is engineered so that your primary automation workflows stay under your direct local control inside your browser session.
1. Chrome Web Store single-purpose compliance
ORCA is a general-purpose browser productivity and workflow automation tool. Its single, unified purpose is enabling users to configure, record, and automate repetitive browser interactions — such as point-and-pick button clicks, form field completion, structured data grid extraction, and scheduled workflow execution — on websites they actively visit or configure. Its manifest permissions (activeTab, scripting, storage, alarms, offscreen, and webNavigation) are scoped to deliver this productivity automation core in accordance with Google Chrome Web Store Developer Program Policies.
2. Data stored locally in your browser session
The vast majority of data created or processed by ORCA is stored locally on your device via browser session storage. This local repository includes:
- URL profiles & picked elements: CSS selectors, XPath locators, bounding box coordinates, and friendly element labels.
- Automation rules: Conditional workflows, multi-action sequences, and background schedule parameters.
- Runtime variables: Extracted HTML table grids, JSON-LD schema blocks, and user-defined variables.
- Run & diagnostics logs: Local execution timestamps, task attempt counts, and step status records.
- Pacing & intervention settings: Your UI preferences, action rate-limiting intervals, and verification pause flags.
This local data never leaves your device unless you explicitly export it as a JSON profile or share a workflow through a collaborative sharing link.
3. Cloud AI queries & visual perception processing
When you explicitly trigger an AI-powered visual task, the extension transmits necessary task context to secure cloud endpoints:
- Visual viewport snapshots: A single secure image snapshot of your active browser viewport to identify clickable targets and visual layouts.
- Structural page summaries: Clean accessibility descriptions of interactive buttons and form inputs on the active page.
- Task instructions: The natural-language goal or command you submitted.
Strict sandbox & confidentiality protection: These payloads are processed in memory strictly to determine the next browser action and return it to your device. We do not sell, rent, or trade your snapshots, page content, or workflow data to third-party data brokers or advertisers.
4. Legitimate rate limiting & verification alerts
To support responsible browser automation and prevent workflow errors, ORCA includes built-in pacing and intervention features:
- Action rate limiting: Natural, randomized micro-intervals are introduced between consecutive clicks and form inputs. This UX pacing helps prevent workflows from overwhelming target web servers or triggering rate limits on your authenticated accounts.
- Verification intervention alerts: Execution pauses and displays a desktop or audio alert whenever a verification challenge, CAPTCHA, or confirmation gate is encountered, so irreversible actions receive human review.
5. Authentication & cloud subscription ledger
When you subscribe to an ORCA Cloud plan ($12, $24, or $49 per month) through Lemon Squeezy, the secure backend verifies your account authentication token and maintains exact dollar-metered credit tracking. All paid plans unlock the same full feature set; tiers differ in monthly credit allowance. Orcamatic does not access, store, or process raw credit card numbers or banking credentials.
Every paid plan comes with a 7-day money-back guarantee. If you are not satisfied, request a refund within the first 7 days of your initial billing period. See the Refund & Cancellation Policy for eligibility details.
6. Contact us
If you have questions about data protection, local sandboxing, or cloud AI policies, contact the privacy team directly:
Email: privacy@orcamatic.com
Support: support@orcamatic.com