Privacy policy: Gmail Sidebar
1. Controller
The controller for Gmail Sidebar is Elie Roth, Körnerstr. 15, 10785 Berlin, Germany (info@rothwork.com).
2. What Gmail Sidebar is
Gmail Sidebar (the "Gmail extension") is our Chrome extension for Gmail. It adds a side panel to Gmail that drafts email replies with AI and shows data from tools you connect, such as a Shopify store.
3. What it accesses
When you connect a Gmail address with "Sign in with Google", the Gmail extension may see your email address and read your email, read-only (Google's "gmail.readonly" permission). It uses this only while you use its side panel, and only for the conversation open in Gmail: the sender and recipient headers, to identify the person you are corresponding with, and the text of the conversation, only when you ask for an AI reply draft. It cannot send, delete, or change email.
4. How it is used
To write a draft, the conversation's text (at most its latest 20 messages), your instructions, and your style notes are sent to our AI provider, Anthropic (USA); the draft is placed in Gmail's reply box for you to review and send yourself. If you connect an integration such as your Shopify store, the address of the person you are corresponding with is looked up in that store. The extension's server runs on Convex, hosted in the EU (Ireland). The data is used only to provide these features: it is not sold, not used for advertising, and not used to train AI models. Anthropic and Convex process it on our behalf under data processing agreements (Art. 28 GDPR); transfers to the USA are protected by appropriate safeguards under Art. 44 ff. GDPR, such as the EU standard contractual clauses. Legal basis: Art. 6(1)(b) and (f) GDPR: providing the features you use and answering correspondence efficiently.
5. What is stored
Email content is not stored or logged; it passes through the server's memory only while a draft is written. Your Google sign-in stays in the extension's memory in your browser. On the server we keep, per extension account: the Gmail addresses linked to it, its settings, the credentials of connected integrations (encrypted), and daily counts of AI drafts and their estimated cost per computer (no content). Your browser keeps a copy of your account's settings so the panel opens quickly.
6. Deleting data
Unlink a Gmail address in the extension's settings (an account whose last address is unlinked is deleted together with its settings and credentials), disconnect integrations there, revoke the extension's access at https://myaccount.google.com/permissions, or ask us at info@rothwork.com to delete everything.
7. Google API Services
The Gmail extension's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
8. Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing. You can also lodge a complaint with a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.
9. Changes
We update this policy when Gmail Sidebar changes.