What we store

Your account — name, email address, and a hashed password.
Your tasks — the steps you wrote and the record of runs.
Your mailboxes — host, port, username and password. The password is encrypted at rest and decrypted only in memory at the moment of sending.
Your templates and sends — the message, the recipient address, when it went, and whether you marked a reply.
Billing — a Stripe customer and subscription reference. Card details never touch our servers.

What we never see

Your inbox. There is no read access to any mailbox. Sending is outbound only, which is also why you mark replies yourself.
Pages you visit. The extension reads the page you have open only when you ask it to, and sends nothing anywhere except the address you act on.
Your card. Stripe handles payment; we hold references, not numbers.

The extension

It holds a token for one browser, revocable on its own from your plan page. It reads email addresses from the page you are on to show you what has happened with them. It does not transmit page content, browsing history, or anything else to us.

Who else gets data

Stripe — billing, when you pay.
Your SMTP provider — every message you send goes through the provider you configured, under their terms.
Our host — where the application runs.

Nobody else. No analytics broker, no advertising network, no data sale — not as a policy position, just as a description of what happens.

Deleting things

Deleting a task, a template or a mailbox removes it. Deleting your account removes everything belonging to it, including the sending record. Ask by email and it happens; there is no retention window to wait out.

Cookies

One session cookie so you stay signed in, and one preference for your theme. No tracking cookies, so there is no banner to dismiss.

Questions

Write to [email protected] and a person will answer.

What we store, and what we never see