Privacy Policy

Last updated: September 5, 2026

MailBright is a Chrome extension that helps you write and review email replies inside Gmail. This policy explains what data MailBright handles, how it is used, and the choices you have.

What we collect

Account information. When you sign in with Google, we receive your name and email address (via Google's OpenID email and profile scopes) to identify you and connect you to your organization's MailBright account. We never receive your Google password.
Email content you're working on. To suggest a reply and run a quality check, MailBright reads the email you currently have open in Gmail and the reply you are drafting, and sends that content to our service to generate your suggested reply and quality feedback.
Local settings. Your theme preference and a short-lived sign-in token are stored in your browser (via chrome.storage.local) so you stay signed in and don't have to reconfigure. These stay on your device.

We do not collect your browsing history, keystrokes, location, health, or financial information.

How we use your data

We use this data solely to:

authenticate you and associate you with your organization's account, and
generate suggested replies and quality checks for the email you're working on.

To produce a reply, email content is processed by our backend and by trusted AI service providers acting on our behalf, solely to generate your reply. We do not use your email content for advertising, and we do not sell it.

How we share data

We do not sell your data. We share it only with service providers who help us operate MailBright (such as cloud hosting and AI model providers), and only so they can process it to provide the service on our behalf. We may disclose information if required by law.

Data retention & security

We retain your account information (name and email) while your MailBright account is active. Email content you are replying to is processed to generate your reply and is not used for any unrelated purpose. We use industry-standard measures to protect data in transit and at rest.

Your choices

Sign out at any time from the MailBright panel in Gmail.
Remove the extension from Chrome to stop all data processing; your locally stored settings and sign-in token are removed on uninstall.

Limited Use disclosure. MailBright's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. We only use Google user data to provide and improve MailBright's in-Gmail features, and never for advertising or resale.

Children's privacy

MailBright is a tool for businesses and their staff and is not directed to children.

Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the current version.

Contact us

Questions about this policy or your data? Email contact@novanine.com.