Legal

Privacy Policy

Last updated: April 2026

DraftMate is a Chrome extension that generates AI-powered email reply drafts inside Gmail and Outlook Web. This Privacy Policy explains what data we access, how it is used, and your rights as a user. We believe in keeping things simple and honest.

🔒

No data stored

Email content is processed in real-time and never saved to any database.

🚫

Never sold

Your data is never sold or transferred to third parties for any purpose.

🎯

Single purpose

Data is used only to generate your reply draft — nothing else.

You're in control

You review every draft before anything is sent. DraftMate never sends automatically.


1. Who We Are

DraftMate is developed and maintained by Odunayo Gabriel Adepoju, a student at the University of Cincinnati. This is an independent project and not affiliated with Google, Microsoft, or Anthropic. For any questions, contact: [email protected]

2. What Data We Access

When you open an email in Gmail or Outlook Web, DraftMate reads the following information to generate a reply draft:

Data Why it's needed Stored?
Email subject line To understand the topic of the email No
Sender name / email To address the reply appropriately No
Email body (up to 2,000 characters) To generate a contextually relevant reply No

✓   No email content is ever written to a database or log file. All data is processed in memory during the request and discarded immediately after the draft is returned.

3. How Your Data Is Used

Your email data follows this path when you use DraftMate:

Your data is never used for advertising, analytics, model training, profiling, or any purpose other than generating your reply draft.

4. Third-Party Services

DraftMate uses the following third-party services:

5. How DraftMate Interacts With Gmail and Outlook

DraftMate does not use the Gmail API or any Google OAuth scopes. It reads email content directly from the Gmail and Outlook Web pages using standard browser DOM access — the same way any webpage reads its own content. No Google or Microsoft account credentials are requested, stored, or transmitted by DraftMate.

When you click "Open in Gmail", DraftMate uses DOM injection to click Gmail's native Reply button and paste the draft into Gmail's own compose window. You then send the email using Gmail's own Send button. DraftMate never sends an email on your behalf.

6. Data Retention

DraftMate does not retain any user data. Email content sent to the backend is held in memory only for the duration of the API request (typically under 3 seconds) and is not written to any storage system, log, or cache.

7. Children's Privacy

DraftMate is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has used DraftMate, please contact us at [email protected].

8. Security

All data transmitted between your browser and the DraftMate backend is encrypted via HTTPS. The backend is hosted on Render with industry-standard security practices. While we take reasonable steps to protect your data, no transmission over the internet is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page. Continued use of DraftMate after changes are posted constitutes your acceptance of the updated policy.

10. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact:

Odunayo Gabriel Adepoju
[email protected]