Local-First Privacy Architecture
Email Automate is a Chrome extension. Its automation — mailbox navigation, reading routines, and actions — runs inside your own Chrome profile.
- The extension does not send your email messages, subject lines, or activity logs to our servers.
- Automation settings and activity history are stored in your Chrome profile's extension storage.
- The only data the extension sends to us is what license activation needs (see License Activation & Devices).
Information We Collect When You Buy
We collect only what the purchase and your license need:
- Purchase email and optional name: used to create your order, send your license key and download link, and support you.
- Order and payment records: order reference, amount, currency and status; the Razorpay order and payment IDs; the payment method type Razorpay reports (for example card or UPI); refund status; and timestamps. We never receive your card number, CVV, or bank login — payments are handled by Razorpay.
- Your license: the key is stored only as a one-way (keyed) hash plus its last four characters, so support can recognise it. We do not keep the full key; it is sent to you by email.
- Downloads: download links are time-limited and stored only as one-way hashes. We count downloads per license and record when the last one happened. IP addresses are not stored with downloads.
- Email delivery records: recipient, delivery status, and the email provider's message ID — never the license key.
- Abuse protection: to rate-limit checkout, download and license requests, we keep request counters stored under a one-way hash of your IP address, email or license key, not in readable form.
The service providers we use for purchases and licenses are listed on our Data Privacy page.
License Activation & Devices
To activate and periodically re-check your license, the extension sends your purchase email, your license key, a random identifier it creates for each Chrome profile, and its version number to our license server.
To enforce the 2-device limit we store, for each activated device: a one-way hash of that identifier plus its first eight characters (so support can tell your devices apart), the extension version, and when the device was activated and last checked. Deactivating a device frees its place; its record is kept and marked as released.
No Access to Mailbox Passwords
Email Automate operates exclusively inside active, already signed-in webmail sessions (such as Gmail, Outlook, Yahoo, AOL, or Proton). We never ask for your email account passwords, API secret keys, OAuth tokens, or login credentials.
Purchase & Delivery Emails
When you buy Email Automate:
- Your purchase email is used to send your license key and download link, and to contact you about your order or license.
- We never sell, rent, or monetize customer emails with third-party advertisers.
Your Rights (GDPR & CCPA)
In accordance with GDPR, CCPA/CPRA, and international privacy laws, you can ask us to:
- Access or export the purchase, license and device records we hold about you.
- Correct inaccurate records.
- Delete your data. Some order and payment records may need to be kept where the law requires it, and because your license is checked against your purchase email, deleting your license record ends the license.