Privacy Policy

This policy explains how the TurboMail Chrome extension and this website collect, use, handle, store, share and delete data. It applies to every user of the extension and to visitors of turbomailexperience.com. The data controller is the publisher of TurboMail, reachable at turbomailsupport@gmail.com.

TurboMail is a Chrome extension that changes how Gmail looks and works inside your own browser. It shows your existing mailbox as chat-style conversations and adds tools such as inline replies, rich formatting, search, labels, scheduling, read receipts, voice notes, templates and optional AI writing help. You keep using your own Google account and your own email address; TurboMail is not an email provider and does not create a second inbox.

Google account and mail data: when you sign in with Google, TurboMail receives an access token for your account and reads your email messages, subjects, senders and recipients, labels, attachments and your email address and basic profile info (name, picture). This data is processed in your browser, on your device, only to render your mailbox and to carry out the actions you request (send, reply, forward, label, archive, delete, schedule, mark read or unread).

Preferences and local app data: settings, signatures, templates, drafts in progress, the account you last used, and a cache of recently viewed conversations.

Anonymous product usage data: a randomly generated installation identifier, extension version, browser locale, names of features used with counts, and error events with counts. This contains no message content, no subjects, no recipients, no email addresses and no identity information.

Read receipt data: for messages you choose to track, a random identifier per message plus the fact that the tracked message was opened and the time it was opened. We do not record who opened it, their IP address, their location, or any message content.

Contact form data: if you write to us through the form on this site, we receive the name, email address and message text you type.

We do not collect health data, financial or payment data, authentication credentials such as passwords, personal communications for our own purposes, location data, web browsing history, or any data about children.

Google user data is used for one purpose only: to provide the mailbox features you see and the actions you trigger inside the extension. It is never used for advertising or ad targeting, never sold or rented, never used to build profiles, never used to train or improve generalised AI or machine learning models, and never used for creditworthiness or lending decisions.

Preferences and cached data are used to keep the interface fast and consistent between sessions. Anonymous usage and error data are used only in aggregate to understand which features are used and where the extension fails, so we can fix problems. Contact form data is used only to reply to you.

TurboMail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Mail content: read directly from the official Gmail API into your browser over an encrypted connection and held only in your browser's memory and local extension storage cache. Mail content, subjects, recipients, attachments and email addresses are never transmitted to, processed by, or stored on our servers.

On your device: preferences, signatures, templates, drafts, the cached conversation data and your sign-in state are stored in Chrome's extension storage on your computer. Access tokens are held only for the lifetime of the session and refreshed against Google; we never store your Google password.

On our servers: only the anonymous usage and error records, read receipt records (random identifier, opened yes/no, timestamp), scheduling records needed to deliver a message you asked to send later, and contact form submissions. These are stored in a managed PostgreSQL database hosted with Supabase (servers in the European Union), encrypted in transit and at rest, with access restricted to the publisher through authenticated accounts.

Scheduled sending: if you schedule a message with server-side delivery, the message you composed and an authorisation token for your account are stored encrypted only until the message is sent or cancelled, and then deleted. If you schedule using Gmail's own scheduling, nothing is stored with us.

We do not sell, rent or trade any data, and we do not share data with advertisers, data brokers or analytics networks.

Data is shared only with the service providers strictly needed to run the product: Google (Gmail API and Google sign-in, to access your mailbox at your instruction), Supabase (database and hosting for the anonymous and operational data described above), Cloudflare (serving this website and the extension's backend endpoints), and Resend (sending the notification email when you submit the contact form). These providers act as processors under contract and may not use the data for their own purposes.

If you explicitly trigger an optional AI writing action, the specific text you are composing, or the thread you asked to summarise, is sent to the AI provider selected for that action (for example Google Gemini, OpenAI or Anthropic, or a model running fully on your own device) solely to generate that result. Nothing is sent unless you trigger the action, and the AI features can be left unused.

We may disclose data if legally required by a valid legal process, or to protect the rights and safety of users.

Local data on your device is kept until you clear extension data or remove the extension. Anonymous usage and error records are retained for up to 24 months and then deleted or fully aggregated. Read receipt records are retained for up to 12 months. Scheduled message payloads are deleted immediately after sending or cancellation. Contact form submissions are kept until the conversation is resolved, and at most 24 months.

All network traffic uses HTTPS. Server-stored data is encrypted at rest, message payloads for scheduled sending are additionally encrypted with a key held only by our backend, and administrative access requires an authenticated account. The extension requests only the permissions its features need and performs mail processing on your device rather than on our servers, which keeps the amount of data that could ever be exposed to a minimum.

You can revoke TurboMail's access to your Google account at any time at myaccount.google.com/permissions, and remove the extension from Chrome to stop all processing and delete its local data.

You may request access to, correction of, or deletion of data we hold, or object to its processing, by emailing turbomailsupport@gmail.com. Because usage data is anonymous by design, a deletion request for it needs the installation identifier shown in the extension's about information. We respond within 30 days.

Access to mail.google.com and Google's mail APIs: to read and render your mailbox and to carry out the mail actions you request. Sign-in (identity): to obtain a Google access token for your own account. Storage: to keep your preferences, templates, signatures and cache on your device. Alarms: to run timers for scheduled sending and background refresh. Notifications: to alert you about new mail. Optional AI provider endpoints: only used when you trigger an AI action.

TurboMail is not directed at children under 13 and we do not knowingly collect their data. If this policy changes materially we will update the date below and, where the change is significant, note it on this page before it takes effect.

Questions about this policy or about your data: email turbomailsupport@gmail.com, or use the contact form on the home page and we will reply by email.