SendArc

Privacy policy

Last updated: 2 September 2026

Desktop application data

A Simple MAPI request may include To, Cc, Bcc, subject, body, formatting and attachments. SendArc writes the pending request and copied attachments to a per-user local queue so the user can review, send or discard it. Pending data remains on that Windows device until it is sent, discarded or removed through local maintenance.

When the user confirms Send, SendArc builds the MIME message locally and sends it directly to Google’s Gmail API over HTTPS. Message content is not sent through a KaPaPi or SendArc server.

Google account access

SendArc requests only https://www.googleapis.com/auth/gmail.send, which allows it to send the message the user approved. It does not request inbox-reading, mailbox-search, contacts, calendar, gmail.compose, gmail.modify or mail.google.com access.

OAuth tokens are stored in Windows Credential Manager. They are not stored in local queue files, website analytics or KaPaPi servers. The user can disconnect SendArc and revoke access from their Google Account.

Google API Limited Use

SendArc’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google API data is used only to provide the prominent user-facing Gmail send feature, is not sold, is not used for advertising, and is not used to train generalized AI or machine-learning models.

Logs and app telemetry

The desktop beta has no hidden telemetry. Local diagnostics are designed to exclude OAuth tokens, recipients, subjects, bodies, attachment names and paths, Gmail message IDs and Gmail response bodies. Users should still inspect and sanitize diagnostics before sharing them.

Website and Business Beta data

The full product site at sendarc.pages.dev is hosted by Cloudflare. Its optional Business Beta form stores work email, company, approximate seat range, current workflow, an optional note and basic campaign labels in Cloudflare D1. Do not submit message content, recipients, credentials or confidential attachments.

Lead data is used only to evaluate and contact beta participants and is retained for no more than 12 months after the last product or beta contact. A one-way anti-abuse hash may be retained for no more than 24 hours. The site may record allowlisted page and CTA events without advertising cookies, cross-site identifiers or desktop email data.

Processors and disclosure

• Google processes OAuth and Gmail API data under Google’s policies.
• Cloudflare processes full-site delivery, security, Pages Functions and D1 data.
• GitHub hosts the source, releases and public issue forms and serves this KaPaPi page.

KaPaPi does not sell personal data. Data may be disclosed only when required by law or to the processors above as necessary to operate the stated service.

Access and deletion

To request access to or deletion of a Business Beta record, email maxtop9843@gmail.com from the submitted address. SendArc is operated by 장형진 under the KaPaPi developer brand.