Privacy Policy

Last updated: August 28, 2026

InboxWise ("we", "our") is a Chrome extension that helps you write professional Gmail replies with AI. This policy explains in full what user data we collect, how we use (process) it, where and how long we store it, and with whom we share it. We keep data collection to the absolute minimum required for the product to work.

1. Data we collect

We collect only the following data, and only for the purposes listed:

• Your Gmail address — auto-detected when you use the extension (you can edit it before payment). Purpose: identify your account for the free quota and Pro subscription.
• Email content you submit — the body of the email you are replying to, or your own draft, sent only when you explicitly click "Generate Reply" or "Polish My Draft". Purpose: generate the AI reply or polished text. We never scan, read, or upload your inbox in the background.
• Usage data — how many free generations you have used, your subscription plan and its dates. Purpose: enforce the free quota and activate Pro.
• Email signature (optional) — only if you type it into the signature box and click "Save". Purpose: sync your signature across devices and append it to generated replies. It is stored on our servers until you clear the field and save again, which deletes it.
• Payment outcome — the subscription result reported by our payment processor (plan, status, date). Purpose: activate your Pro subscription.

We do not collect your name, phone number, location, browsing history, health information, or any other personal identifiers beyond the Gmail address above — unless you voluntarily include such details in the optional email signature you choose to save. We also never collect or store payment credentials such as card numbers — those are entered only on our payment provider's secure checkout (see Section 6).

2. How we use your data

• To provide the core service: generating and polishing email replies.
• To manage your free quota (30 one-time generations) and Pro subscription status.
• To answer support requests you send us.

We never use your data for advertising, profiling, building user profiles, training AI models, or any purpose unrelated to the single function of this extension.

3. How we share your data

We never sell or rent your data. We share data only with these service providers, solely to deliver the product:

• Cloudflare (Workers & D1 database) — hosts our backend and stores the account data listed in Section 1. Covered by the Cloudflare Privacy Policy.
• DeepSeek (AI model provider) — receives the email content you submit, solely to produce your reply or polished text. Covered by the DeepSeek privacy policy.
• Dodo Payments — processes payments. We only receive the payment outcome, never card details. Covered by the Dodo Payments Privacy Policy.

We disclose data to authorities only when legally required.

We share no data with advertisers, data brokers, or any other third parties beyond the three service providers listed above, and we never sell or rent user data.

4. Email content is never stored

Email content is processed in memory for the duration of your request and is not written to any database or log by us. After your reply is generated and returned, the content is discarded.

5. Data storage and retention

• Account data (Section 1) is stored in our Cloudflare D1 database, encrypted in transit (HTTPS) and kept only for as long as your account is active.
• Local browser data: the extension stores your Gmail address, usage cache, and (if you save one) a local copy of your email signature in Chrome's local storage (chrome.storage.local) on your device only. This data never leaves your browser except as described above. Your saved signature is also stored server-side in Cloudflare D1 so it can sync across devices.
• Email content: not retained at all (see Section 4).

Access to our database and server secrets is restricted to the project maintainers and protected by Cloudflare's authentication and encrypted secret storage.

6. Payments

Payments are handled entirely by Dodo Payments. We never see or store your card number, security code, or other payment details. Dodo notifies us of the subscription outcome so we can activate Pro for your email address. Our terms of sale — including billing, cancellation, and refund rules — are posted in our Terms of Sale.

7. Permissions we request

• mail.google.com access — to read the email you are replying to and insert the generated text into the reply box. This happens only when you click a button in the panel.
• storage — to remember settings locally in your browser.
• side panel — to show the InboxWise interface beside Gmail.
• scripting & activeTab — to activate the extension on the Gmail tab you currently have open, so it can read the displayed email and insert your reply.

8. Analytics and tracking

InboxWise contains no analytics, no advertising, and no third-party trackers. We do not build usage profiles or fingerprint your device.

9. Data security

All communication between the extension and our servers happens over HTTPS. Our backend runs on Cloudflare's infrastructure, and secrets are stored in encrypted Cloudflare secret storage, never in code.

10. Your choices and rights

• Access & correction: contact us to see or correct the account data we hold for your email address.
• Deletion: email us from your registered address and we will delete your account record. Deleting the extension removes all locally stored settings from your browser.
• Stop using the service: you can stop submitting content at any time; nothing is collected passively.

11. Children's privacy

InboxWise is not directed at children under 13, and we do not knowingly collect data from them.

12. Compliance with Chrome Web Store policies

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Our use of user data complies with the Chrome Web Store User Data Policies. Specifically: data accessed through Gmail is used only for the user-facing features described above, never for advertising, never sold, and never used to target users.

13. Changes to this policy

If we make material changes, we will update this page and revise the "Last updated" date above. Continued use of the extension after changes constitutes acceptance of the updated policy.

14. Contact

Questions, data requests, or feedback: email us at [email protected].

© 2026 InboxWise. All rights reserved.