Privacy Policy
Last updated: September 11, 2026
This Privacy Policy explains how MailWorker ("we", "us", or "our") handles information when you use our Chrome extension and website. We designed the product so that bulk-sending work stays on your device whenever possible.
1. Summary
- The Chrome extension automates actions inside Gmail in your browser. It does not upload your CSV contact lists, recipient emails, message subjects, or message bodies to our servers.
- The extension does not ask for or store your Gmail password.
- If you activate Pro in the extension, a short activation code is sent to our servers only to verify your license. Contact lists and email content are not included in that request.
- If you use our website account features (for example email sign-in or checkout), we process the account email and related data needed to operate that service.
2. The Chrome extension
What it does
MailWorker helps you import a contact list (such as a CSV), personalize messages with template variables, and send mail through the Gmail web interface you are already signed into. Sending happens as local browser automation on https://mail.google.com/*.
Permissions (why we ask for them)
- storage — save drafts, queue progress, sending preferences, free-tier usage counters, and Pro license state locally in your browser.
- tabs — find, focus, or open your Gmail tab so the send workflow can run.
- scripting — inject or re-attach the automation script that drives the Gmail compose UI when needed.
- alarms — schedule delays between sends and keep long send jobs reliable.
- Host access to mail.google.com — operate only on Gmail's web app for sending automation, not on unrelated websites.
- Host access to mailworker.co/api — contact our license APIs to activate Pro or re-check that an activation code is still valid.
Data that stays on your device
Processed and stored locally in the extension (for example via Chrome local storage), including:
- CSV / contact rows you import
- Email subject and body templates
- Send queue and progress state
- Delay and other sending preferences
- Daily free-plan send counts (for local quota)
- Pro license state after activation (including the activation code stored on your device so the extension can re-check license status)
We do not receive copies of your contact lists or message content as part of the sending automation. Clearing the extension's local data or uninstalling the extension removes that local state from your browser.
Data the extension may send to our servers
When you activate Pro, or when the extension re-checks Pro status (for example when you open the extension popup or start sending), it may send:
- Activation code — to
https://mailworker.co/api/license/activateorhttps://mailworker.co/api/license/status, solely to verify that the code is valid and still entitled to Pro access.
Those requests do not include your CSV, recipient list, email subject, email body, or Gmail password. Successful status checks may update a last-used timestamp on your account so we can operate and support the Pro service.
What we do not collect from the extension
- Gmail passwords or Google account credentials
- Your full contact / CSV lists
- The content of emails you send through the automation
- Gmail inbox contents for our own databases
- Browsing history on websites other than the hosts listed above
3. The website and account
Our marketing site and account area are separate from the local sending pipeline. If you sign in or purchase on the website, we may process:
- Email address — to send a one-time sign-in code, to identify your account, and to email a Pro activation code after purchase.
- Authentication data — one-time codes, session cookies, and basic security metadata such as approximate request IP and timestamps (for rate limiting and abuse prevention).
- Account / license fields — plan status, activation code, license status, last login / last extension use timestamps, and related billing or order identifiers if you purchase a paid plan (payments are processed by our payment provider).
When you visit our website, we may receive your IP address, browser/device info, and the page URL for security and operational notifications.
Transactional email (such as OTP codes and activation codes) may be delivered through an email delivery provider acting on our instructions.
4. Cookies and similar technologies
We use essential cookies or similar storage for website sign-in sessions. We do not use the extension to track your browsing across other websites.
5. How we use data
- Provide the extension, sign-in, and account access
- Verify Pro activation codes and license status
- Prevent abuse (rate limits, security)
- Provide customer support when you contact us
- Process paid plans when you choose to purchase
- Understand whether Pro licenses are still in active use (via last-used timestamps from license checks)
We do not sell your personal information.
6. Sharing
We may share website account or payment-related data with service providers who help us operate the site (for example hosting, email delivery, or payments), only as needed to provide the service. We may also disclose information if required by law.
Google / Gmail is operated by Google LLC. Your use of Gmail is governed by Google's terms and privacy policy. MailWorker is not affiliated with Google LLC.
7. Data retention
- Extension local data — retained in your browser until you clear it or remove the extension.
- Website account and license data — retained while your account is active and as needed for security, legal, support, and billing records.
- OTP codes — short-lived and invalidated after use or expiry.
8. Security
We use reasonable administrative and technical measures to protect website account and license data. No method of transmission or storage is 100% secure. Keep your Google account secured with strong authentication; the extension relies on your existing Gmail browser session.
9. Children
The service is not directed to children under 16, and we do not knowingly collect personal information from them.
10. Your choices
- Uninstall the extension or clear its local storage at any time.
- Stop using the website or request account deletion by contacting us.
- Depending on where you live, you may have rights to access, correct, or delete certain personal data we hold on the website.
11. Changes
We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use after an update means you accept the revised policy.
12. Contact
Questions about privacy: hello@mailworker.co. You can also use our Contact page.