InboxPilot Privacy Policy

Effective: October 12, 2026. Plain-English version; this is the whole policy.

The one-sentence version

InboxPilot never sends your email — or anything about you — anywhere. Everything happens on your device.

What InboxPilot does with the Gmail page

To summarize threads, build your digest, and find unsubscribe links, the extension reads the text of the Gmail page you already have open in your browser. That reading happens entirely inside your browser, on your computer.

What leaves your device

Nothing. InboxPilot: - makes zero network requests — no analytics, no crash reports, no servers of ours to phone home to; - has no account system and collects no name, email address, or identifiers; - never stores email content — summaries exist only in memory while a panel is open and are discarded when you close it.

On-device AI

When your version of Chrome includes the free built-in AI model, InboxPilot can use it to write better summaries and reply drafts. That model runs on your device; your text is not sent to Google or anyone else for this. If the model isn't available (or you choose "Heuristics only" in settings), plain local rules do the job instead — still fully offline.

What is stored

Only your settings (AI mode, reply tone, digest preferences, sweep options, theme), saved with Chrome's built-in chrome.storage.sync so they follow your Chrome profile. You can erase them any time with "Reset settings to defaults" on the options page, or by removing the extension.

Permissions, in plain English

Changes

If this policy ever changes, the new version will ship with the extension update and the "effective" date above will change. We will never retroactively start collecting data under an old policy.

Contact

Questions about privacy: remove the extension and all local data goes with it — there is nothing on any server to delete, because there is no server.