SendArc

Privacy policy

Last updated: 4 September 2026

Desktop application data

A Simple MAPI request may include To, Cc, Bcc, subject, body, formatting and attachments. SendArc writes the pending request and copied attachments to a per-user local queue so the user can review, send or discard it. Pending data remains on that Windows device until it is sent, discarded or removed through local maintenance.

When the user confirms Send, SendArc builds the MIME message locally and sends it directly to Google’s Gmail API over HTTPS. Message content is not sent through a KaPaPi or SendArc server.

Google account access

SendArc requests only https://www.googleapis.com/auth/gmail.send, which allows it to send the message the user approved. It does not request inbox-reading, mailbox-search, contacts, calendar, gmail.compose, gmail.modify or mail.google.com access.

OAuth tokens are stored in Windows Credential Manager. They are not stored in local queue files, website analytics or KaPaPi servers. The user can disconnect SendArc and revoke access from their Google Account.

Google API Limited Use

SendArc’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google API data is used only to provide the prominent user-facing Gmail send feature, is not sold, is not used for advertising, and is not used to train generalized AI or machine-learning models.

Logs and app telemetry

The desktop beta has no hidden telemetry. Local diagnostics are designed to exclude OAuth tokens, recipients, subjects, bodies, attachment names and paths, Gmail message IDs and Gmail response bodies. Users should still inspect and sanitize diagnostics before sharing them.

Website and Business Beta data

The full product site at sendarc.pages.dev is hosted by Cloudflare. Its optional Business Beta form stores work email, company, approximate seat range, current workflow, an optional note and basic campaign labels in Cloudflare D1. Do not submit message content, recipients, credentials or confidential attachments.

Lead data is used only to evaluate and contact beta participants. It expires 12 months after the latest form submission, or earlier on a verified deletion request. A separate rate-limit table stores a secret-keyed IP hash specific to the endpoint and current hour. It changes each hour and expires 24 hours after its hourly window starts; raw IP addresses and user-agent strings are not copied into these tables.

First-party events contain only allowlisted event names, known public page paths, referrer hostnames and coarse campaign labels. Full referrer URLs are stripped before transmission. Events do not contain visitor hashes, advertising cookies, cross-site identifiers or desktop email data. Events expire after 90 days; a beta-submission event is recorded only when the form is successfully saved.

A scheduled Cloudflare maintenance task deletes expired rows every 15 minutes, even without website traffic. Deletion occurs on the next successful cleanup and may be delayed by a service outage. Cloudflare recovery history can retain deleted data for up to seven additional days on the current free plan; recovery copies are not used for marketing or routine analytics.

Processors and disclosure

• Google processes OAuth and Gmail API data under Google’s policies.
• Cloudflare processes full-site delivery, security, Pages Functions, D1 and maintenance logs.
• GitHub hosts the source, releases and public issue forms and serves this KaPaPi page.
• This KaPaPi page loads fonts from Google Fonts, which receives ordinary font-request metadata. The separate SendArc product site hosts its fonts locally.

KaPaPi does not sell personal data. Data may be disclosed only when required by law or to the processors above as necessary to operate the stated service.

Access and deletion

To request access to or deletion of a Business Beta record, email maxtop9843@gmail.com from the submitted address. SendArc is operated by 장형진 under the KaPaPi developer brand.