GistReply Privacy Policy
GistReply for Gmail ("GistReply" or "the extension") is provided by Pocket Tools ("we"). This policy explains what data GistReply handles, where it is handled, and who it is shared with.
In short
Your emails, the gist you type and your drafts stay on your computer: the AI that writes your reply runs there, and none of it is ever sent to us or anyone else. Only if you sign in do we learn your email address, your Google account name, your plan, and how many replies you wrote this month.
Your mail stays on your computer
- Your mail: GistReply writes replies with an AI model that runs on your own computer. The conversation you are replying to is used only there, to write the draft. GistReply does not use the Gmail API and does not ask for access to your Gmail account.
- The gist and revision requests you type: used only on your computer to write the draft, and not kept after the input bar closes.
- The draft: written only into Gmail's reply box. You decide whether to send it; the extension never sends for you.
We never collect, store or see your emails, the gist you type or your drafts. The part of GistReply that handles them has no way to connect to the internet, and every build checks this automatically. The AI model is downloaded to your computer once by your browser, not through us.
Data stored in your browser
The extension uses Chrome's extension storage (chrome.storage) to keep, on your computer: your preferences, how many free replies you used this month while signed out, the last plan details we received after you signed in (shown when the server can't be reached), and the model download progress. None of this is uploaded, and Chrome deletes it when you remove the extension.
Data we collect when you sign in
Signing in is optional. Without it you still get a number of free replies each month, and we collect nothing.
When you sign in with Google, we receive and store, through Google Sign-In (scopes limited to openid, email and profile) and Firebase Authentication:
- your Google account's email address, name and account identifier;
- when your account was created;
- your plan: Free or Premium, monthly or yearly, subscription status, and the current billing period;
- this month's usage: how many replies you wrote (a number only, no content);
- after you pay, the customer ID Stripe assigns you.
We use this data only to sign you in, count your free replies, provide Premium and manage your subscription. We do not sell it, use it for advertising, or build profiles from it.
Feedback
If you send us feedback from our feedback page, we receive what you write, the email address you add (optional), the GistReply version and your Chrome version. We store it in a Google Sheets spreadsheet and use it only to answer you and improve GistReply. To limit abuse we also count how many messages come from each network address in an hour, keeping only a scrambled (hashed) form of the address, never the address itself. Please don't include the content of your emails.
Payments
Stripe handles Premium payments, subscription management and invoices. Your card number and other payment details go straight to Stripe; we never see or store them. Stripe tells us your subscription status so we can turn Premium on or off. See the Stripe Privacy Policy for how Stripe handles your data.
Service providers
- Google (Firebase, Google Cloud, Google Sheets): sign-in, storing the account data and feedback described above, and running our server functions. The data is stored in Google data centers in the United States.
- Stripe: payments and subscriptions.
We share your data with no other third party unless the law requires it.
Chrome Web Store User Data Policy
GistReply's use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements: data is used only to provide and improve the features described above, is not transferred to third parties, and is not used for advertising or to determine creditworthiness or for lending purposes.
Retention and deletion
- We keep account data for as long as your account exists, and feedback for as long as it helps us improve GistReply. To delete your account, your feedback and all related data, email us at the address below and we will delete it within 30 days, except payment records the law requires to be kept (held by Stripe).
- Signing out clears the account details cached on your computer.
- You can cancel Premium at any time from Manage subscription in the extension popup.
Children
GistReply is not directed to children under 13, and we do not knowingly collect their data.
Changes
When this policy changes we will update this page and the effective date above. We will point out significant changes in the extension.
Contact
For privacy questions or deletion requests, email natlan.tech@gmail.com.