Privacy Policy
**Last updated: September 4, 2026**
## 1. Overview
Convofy is a Chrome extension that presents the Gmail conversation currently open by the user as a searchable, group-chat-style conversation view. This Privacy Policy explains what information Convofy processes, why it is required, and how it is protected.
Convofy operates locally within the user's browser. The developer does not receive, collect, store, sell, or share the contents of a user's Gmail conversations.
## 2. Information Processed
To provide its functionality, Convofy processes information locally contained in the Gmail conversation currently open by the user. Depending on the conversation, this information may include:
- names and email addresses;
- sender, recipient, CC, and BCC information made available by Gmail;
- email subjects, message bodies, quoted messages, and timestamps;
- images, links, and formatting contained in messages; and
- attachment names, file types, file sizes, and Gmail attachment controls.
For Chrome Web Store disclosure purposes, this information may fall within the categories of personally identifiable information, personal communications, and website content.
Convofy does not access or collect passwords, authentication credentials, payment information, health information, precise location, browsing history, or behavioral analytics.
## 3. How Information Is Used
Convofy processes the information locally described above only to:
- display the open Gmail conversation in Convofy's conversation interface;
- distinguish conversation participants;
- support message search and user-selected filters;
- display message details, quoted content, and attachment information; and
- connect user-selected actions, such as Reply, Reply all, Forward, attachment actions, and supported inline-image actions, to Gmail's native interface.
Convofy does not use Gmail information for advertising, profiling, marketing, creditworthiness, lending, or any purpose unrelated to this functionality.
## 4. Local Processing, Storage, and Retention
Gmail conversation information is processed locally in the browser and is kept only in temporary page memory while the relevant Gmail page is active. Convofy does not upload email content to a developer-operated server or retain email content after the Gmail page is closed or refreshed.
Convofy stores only the on-screen position of its movable launcher in Gmail's local site storage so that the launcher can remain where the user placed it. This preference does not contain email content or personally identifiable information. It can be removed by clearing Gmail site data or uninstalling the extension.
## 5. Disclosure and Transfer of Information
Convofy does not sell, rent, disclose, or transfer user data to the developer, advertisers, data brokers, analytics providers, AI services, or other third parties.
When Convofy invokes a Gmail-native action or displays a resource already delivered or hosted by Gmail or Google, the interaction remains between the user's browser and Google's services under the user's existing Gmail session. Convofy does not independently transmit the user's message content.
## 6. Permissions and Website Access
Convofy is limited to `https://mail.google.com/*`. This access is required to read the Gmail conversation opened by the user, render the Convofy interface, and connect explicit user actions to Gmail's native controls. Convofy does not request access to unrelated websites.
The extension uses locally packaged code and does not download or execute remote JavaScript or WebAssembly.
## 7. Security
Convofy is designed to minimize access to user information and uses only the Gmail website access required for its stated purpose. Message content is sanitized before it is rendered in the Convofy interface. The extension uses a restrictive Content Security Policy and does not include advertising, analytics, telemetry, or remote-code services.
No method of software operation can be guaranteed to be completely secure. The developer nevertheless maintains reasonable technical safeguards appropriate to Convofy's local-only design and limited data access.
## 8. User Control
Convofy acts only within Gmail and does not send messages automatically. Reply, Reply all, Forward, and related actions open Gmail's native interface, where the user can review the message and recipients before choosing to send.
Users may stop all processing by closing Convofy, disabling the extension, or uninstalling it from Chrome.
## 9. Changes to This Policy
If Convofy's data practices materially change, this policy and the Chrome Web Store disclosures will be updated before the revised practices are introduced. The effective date above identifies the current version of this policy.