Privacy Policy

1. Who We Are

AI Reply Generator ("we," "our," or "the add-on") is a Gmail Add-on built on Google Apps Script. The service is operated by the developer reachable at fuchi@fuchi.com.

2. Data We Collect and Store

All data listed below is stored exclusively within Google's infrastructure via PropertiesService (Google Apps Script). We do not operate any external database or server.

• AI API key — The API key you provide for Gemini, OpenAI, or Anthropic. Stored in your personal Google Apps Script UserProperties and never transmitted to our systems.
• Templates (prompts) — The reply instruction templates you create. Stored in your personal UserProperties.
• Signature — Your name/signature text for inclusion in replies. Stored in your personal UserProperties.
• Selected AI model — Your preferred AI model choice. Stored in your personal UserProperties.
• Daily usage count — A counter tracking how many AI replies you have generated today (free plan only). Stored in your personal UserProperties and resets daily.
• Email address hash — A one-way SHA-256 hash of your Google account email address, used solely to identify premium subscribers. The original email address is never stored by us.

3. Data We Do NOT Collect

• The content of your emails
• Your Gmail contacts or address book
• Your email address in plain text
• Browsing history or activity outside Gmail
• Any data from emails in threads other than the one you are actively replying to

4. How Email Content Is Processed

When you click "Generate Reply," the add-on reads the subject and body of the current email thread (up to the last 3 messages) and sends this content directly to the AI provider you have configured, using your own API key. This data transfer occurs between your Google account and the AI provider — it does not pass through our servers.

Please review the privacy policies of the AI providers you use:

• Google Gemini: policies.google.com/privacy
• OpenAI: openai.com/privacy
• Anthropic: anthropic.com/privacy

5. Payment Processing

Premium subscriptions are processed by Stripe, Inc. We do not collect or store payment card information. When you subscribe, you are redirected to Stripe's secure checkout. Stripe's privacy policy is available at stripe.com/privacy.

Upon a successful payment, Stripe notifies us via webhook. We record a SHA-256 hash of your email address in our script properties to activate your premium status. No payment details are stored on our side.

6. Google OAuth Scopes

The add-on requests the following OAuth scopes, which are the minimum required for its functionality:

• gmail.addons.current.message.readonly — Read the currently open email to build the reply prompt.
• gmail.addons.current.action.compose — Support the compose window trigger.
• gmail.addons.execute — Allow the add-on to run.
• gmail.compose — Create a reply draft and manage previously generated drafts.
• script.storage — Store your settings and templates.
• script.external_request — Call AI provider APIs with your API key.
• userinfo.email / userinfo.profile — Identify your account for premium status checks.
• spreadsheets — Write audit logs if you have configured an audit log spreadsheet (optional).

7. Data Retention

Your settings and templates are retained in Google Apps Script UserProperties until you delete them or uninstall the add-on. Uninstalling the add-on removes access to your data but does not automatically delete data stored in UserProperties; you can clear this data manually from the Settings screen before uninstalling.

8. Children's Privacy

This add-on is not directed at children under 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the add-on after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy, please contact us at fuchi@fuchi.com.