InboxPilot is a privacy-first Chrome extension. All of your data stays on your own device. We have no servers, no accounts, no tracking, and no analytics. We cannot see, read, or share any of your data because we never receive it.
When you use InboxPilot, the extension stores the following locally on your device (in Chrome's built-in storage and IndexedDB):
| Data | Where | Why |
|---|---|---|
| Thread items (next steps, waiting, blockers, risks, follow-ups) | Your device | The core feature — captured actions from your email threads |
| Contacts auto-extracted from email signatures (name, email, company, title) | Your device | To enrich thread items with context |
| Activity log (e.g., "email received from X") | Your device | Timeline display in the panel |
| Reminders you set | Your device | Chrome Alarms API to notify you at due time |
| Preferences (theme, notification toggles) | Your device | Remember your settings |
| Time-saved metrics (count of auto-captures, etc.) | Your device | The "Time saved this week" widget |
No. InboxPilot:
The only Chrome permissions we request are:
storage — to save your items on your devicealarms — to wake the extension for reminders you setnotifications — to show desktop notifications for due itemssidePanel — to open the InboxPilot panel next to Gmailmail.google.com host access — to inject the UI into GmailWe do not request:
identity (no Google sign-in)history, cookies, tabs, or any other invasive permissionThe extension reads Gmail's DOM (the visible page) to display contact data you already see. It never sends anything to Gmail that wasn't already there. Gmail (Google) sees the same activity it always does — you reading your own inbox.
No. There are no developer-accessible servers, databases, or logs. Your data exists only in your Chrome profile.
When you remove InboxPilot from Chrome, all data stored by the extension is automatically deleted by Chrome, along with the extension itself. There is nothing left behind on any server because nothing was ever sent to a server.
You have full control over your data:
None. InboxPilot has zero third-party integrations, analytics SDKs, crash reporters, or external APIs.
InboxPilot is a productivity tool for adult professionals. We don't knowingly collect data from children under 13 (or under 16 in the EU). Since we don't collect data from anyone, this is automatic.
If this policy ever changes (e.g., if we add an optional cloud-sync feature), we will update this document and notify users via the extension before any new data is collected.
Questions, concerns, or feedback about privacy: