MailMerge Pro ("the Extension") is a Chrome browser extension that lets you send personalised bulk emails via your Gmail account using data from Google Sheets or CSV files. This policy explains what data is collected, how it is used, and your rights.
1. Data We Collect
The Extension collects the following data solely to provide its core functionality:
- Registration information — your full name, email address, and a brief description of how you plan to use the Extension. This is submitted once during account registration.
- Recipient data — email addresses and merge-tag fields (e.g. first name, company) that you provide via Google Sheets or CSV. This data is processed locally in your browser and is never stored on our servers.
- Email content — the subject and body of emails you compose. This data is processed locally and sent directly to Gmail via the Gmail API on your behalf. It is never stored by the Extension developer.
- Usage counters — a daily email send count stored locally in your browser (chrome.storage.local) to enforce the free-tier limit. This data never leaves your device.
2. How We Use Your Data
- Registration information is stored in a private Google Sheet accessible only to the developer, and is used solely to review and approve access requests. It is not shared with any third party.
- Recipient data and email content are used only to send the emails you request. They are processed in your browser and transmitted directly to Google's Gmail API. We never see or store this data.
- Usage counters are used to enforce the 50 emails/day free-tier limit. They are stored locally and never transmitted.
3. Third-Party Services
The Extension integrates with the following Google services under your Google account credentials:
- Gmail API — to send emails and save drafts on your behalf.
- Google Sheets API — to read your recipient data and to write your registration row to the developer's approval sheet.
- Google OAuth 2.0 — to authenticate you and obtain the permissions above. No passwords are stored by the Extension.
Use of these services is subject to Google's Privacy Policy.
4. Data Storage and Retention
- Registration information is retained in the developer's private Google Sheet until you request deletion.
- Local extension data (approval state, usage counters, scheduled job payloads, audit log) is stored in chrome.storage.local on your device and is deleted when you uninstall the Extension.
- No personal data is stored on external servers owned or operated by the developer beyond the registration Google Sheet.
5. Data Sharing
We do not sell, rent, or share your personal data with any third parties, advertisers, or analytics services. The only data transmitted off your device is:
- Your registration details — sent to the developer's private Google Sheet via the Sheets API.
- Your emails — sent to Gmail recipients via the Gmail API, exactly as you request.
6. Permissions Used
- gmail.send / gmail.compose — to send emails and save drafts.
- spreadsheets — to read your Google Sheet data and write your registration entry.
- userinfo.email — to identify your Google account for authentication.
- identity — Chrome's built-in OAuth API, used to obtain the above tokens.
- storage — to save local state (approval status, usage counters) on your device.
- alarms — to fire scheduled email sends at the time you specify.
7. Your Rights
You may request deletion of your registration data (name, email, description) at any time by contacting the developer at the address below. Local extension data can be cleared by uninstalling the Extension or by running chrome.storage.local.clear() in the Extension's DevTools console.
8. Children's Privacy
The Extension is not directed at children under 13. We do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the Extension after changes constitutes acceptance of the updated policy.
10. Contact
For privacy-related questions or data deletion requests, contact: