Privacy Policy

Diversimail is a Chrome extension that lets you write an email once and send it from several of your own Gmail accounts, each with its own fixed details block and signature. This policy explains what the extension can access and what happens to that information. The short version: your emails, accounts and Google sign-in tokens stay in your browser and go only to Google. We never receive any of them. The only thing we receive is the email address you activate your subscription with.

Who we are

Diversimail is operated by a sole proprietorship registered in Armenia. Contact: [email protected].

What the extension accesses

• Basic Google profile (email address and name) — requested when you connect a Gmail account, so the extension can label that account in your sender list.
• Permission to send email on your behalf (the Gmail gmail.send scope) — used solely to send the messages you compose, from the accounts you tick, at the moment you press Send. The extension cannot read, search, delete, or modify your mailboxes; the send-only permission does not allow it.

Where your data lives

• Your connected account list, per-account fixed parts and signatures, drafts, and settings are stored in Chrome's extension storage on your device (and synced between your own devices by your Chrome profile, if you use Chrome sync).
• Google sign-in tokens are stored locally in your browser and are sent only to Google's own APIs to perform the send you request.
• The content of your emails goes directly from your browser to Google's Gmail servers. It never passes through, and is never stored on, any server of ours.

How your data is protected

Diversimail is designed so that your sensitive data — your Google sign-in tokens and the content of the emails you write — is exposed to as little risk as possible. We protect it through the following measures:

• Minimum necessary access. The extension requests only the send-only Gmail permission (gmail.send) and your basic profile. It cannot read, search, download, or delete any message in your mailboxes — the permission does not allow it — so there is no mailbox data for the extension to expose in the first place.
• Encrypted in transit. Every connection the extension makes to Google — both sign-in and sending — is made over HTTPS/TLS. Your sign-in tokens and email content are never transmitted over an unencrypted channel.
• Stored locally, on your device only. Your connected-account list, signatures, drafts, settings, and Google sign-in tokens are held in Chrome's built-in extension storage on your own device. They are never uploaded to us, and are safeguarded by your operating system's and Chrome profile's own account protections.
• Tokens go only to Google. Sign-in tokens are obtained through Google's official OAuth 2.0 flow and are sent only to Google's own API endpoints to carry out the send you request. They are never transmitted to the developer or to any third party.
• No third-party access or processing. Because Google data never passes through any server of ours, and there is no analytics or tracking of any kind, your sensitive data is never shared with, sold to, or processed by any third party, and no employee of ours can access it — technically, it never reaches us.
• You control retention and revocation. Removing an account in settings deletes its stored token and details; uninstalling the extension removes all of its locally stored data; and you can revoke the extension's Google access at any time at myaccount.google.com/permissions.

Limited Use disclosure

What we do not do

• We do not collect, store, sell, or share your personal data or email content.
• We do not use your Google data for advertising of any kind.
• We do not run analytics on your messages or mailboxes.
• No human being at Diversimail can read your data — technically, it never reaches us.

Payments

Subscriptions are processed by our merchant of record, Lemon Squeezy. Your payment details are handled by them under their own privacy policy.

Subscription activation. When you activate, the extension sends the email address you subscribed with, plus your computer's name, to our license service (license.diversimail.com), which confirms with Lemon Squeezy that the subscription is active and ties it to this one computer. It re-checks about once an hour. Together with the free-trial counter described below, this is the only data the extension ever sends to us, and it is used for nothing else. No Google account data, email content, contacts or tokens are ever included. You can release your computer with Deactivate in settings, and email us to have your subscription email removed.

Free trial. Before you subscribe, you get 5 free sends. So that reinstalling the extension does not reset that count, the extension sends the addresses of the Gmail accounts you have connected (only the addresses — never names, messages, contacts or tokens) to the same license service, which keeps a counter per address. Those addresses are used solely to count free sends, are never linked to anything you send, and can be deleted on request by emailing us.

Revoking access

• Remove any account from the extension's settings at any time.
• Withdraw the extension's Google permissions at myaccount.google.com/permissions.
• Uninstalling the extension deletes its locally stored data from your browser.

Changes to this policy

If this policy changes, the new version will be posted at this address with an updated effective date. Material changes will be noted in the extension's release notes.

Contact

Questions about privacy: [email protected].