Privacy Policy
Last updated: September 9, 2026
This Privacy Policy explains how MailWorker ("we", "us", or "our") handles information when you use our Chrome extension and website. We designed the product so that bulk-sending work stays on your device whenever possible.
1. Summary
- The Chrome extension automates actions inside Gmail in your browser. It does not upload your CSV contact lists, recipient emails, message subjects, or message bodies to our servers.
- The extension does not ask for or store your Gmail password.
- If you use our website account features (for example email sign-in), we process the account email and related authentication data needed to operate that service.
2. The Chrome extension
What it does
MailWorker helps you import a contact list (such as a CSV), personalize messages with template variables, and send mail through the Gmail web interface you are already signed into. Sending happens as local browser automation on https://mail.google.com/*.
Permissions (why we ask for them)
- storage — save drafts, queue progress, and preferences locally in your browser.
- tabs / activeTab — find or focus your Gmail tab so the workflow can run.
- scripting — run the automation script that drives the Gmail compose UI.
- alarms — schedule delays between sends.
- Host access to mail.google.com — operate only on Gmail's web app, not on unrelated websites.
Data that stays on your device
Processed and stored locally in the extension (for example via Chrome local storage), including:
- CSV / contact rows you import
- Email subject and body templates
- Send queue and progress state
- Delay and other sending preferences
We do not receive copies of this content as part of the sending automation. Clearing the extension's local data or uninstalling the extension removes that local state from your browser.
What we do not collect from the extension
- Gmail passwords or Google account credentials
- Your full contact / CSV lists
- The content of emails you send through the automation
- Gmail inbox contents for our own databases
3. The website and account
Our marketing site and account area are separate from the local sending pipeline. If you sign in on the website, we may process:
- Email address — to send a one-time sign-in code and to identify your account.
- Authentication data — one-time codes, session cookies, and basic security metadata such as approximate request IP and timestamps (for rate limiting and abuse prevention).
- Account / subscription fields — plan status and related billing identifiers if you purchase a paid plan (processed via our payment provider when enabled).
Transactional email (such as OTP codes) may be delivered through an email delivery provider acting on our instructions.
4. Cookies and similar technologies
We use essential cookies or similar storage for website sign-in sessions. We do not use the extension to track your browsing across other websites.
5. How we use website account data
- Provide sign-in and account access
- Prevent abuse (rate limits, security)
- Provide customer support when you contact us
- Process paid plans when you choose to purchase
We do not sell your personal information.
6. Sharing
We may share website account or payment-related data with service providers who help us operate the site (for example hosting, email delivery, or payments), only as needed to provide the service. We may also disclose information if required by law.
Google / Gmail is operated by Google LLC. Your use of Gmail is governed by Google's terms and privacy policy. MailWorker is not affiliated with Google LLC.
7. Data retention
- Extension local data — retained in your browser until you clear it or remove the extension.
- Website account data — retained while your account is active and as needed for security, legal, and billing records.
- OTP codes — short-lived and invalidated after use or expiry.
8. Security
We use reasonable administrative and technical measures to protect website account data. No method of transmission or storage is 100% secure. Keep your Google account secured with strong authentication; the extension relies on your existing Gmail browser session.
9. Children
The service is not directed to children under 16, and we do not knowingly collect personal information from them.
10. Your choices
- Uninstall the extension or clear its local storage at any time.
- Stop using the website or request account deletion by contacting us.
- Depending on where you live, you may have rights to access, correct, or delete certain personal data we hold on the website.
11. Changes
We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use after an update means you accept the revised policy.
12. Contact
Questions about privacy: support@mailworker.co. You can also use our Contact page.