CodeOxi Mail Merge — Privacy Policy
Summary
CodeOxi Mail Merge sends personalised emails from your own Gmail account to a list you provide. It runs in your browser. It does not read your inbox, does not store your emails on our servers, and does not sell or share your data.
Gmail and Google Sheets are trademarks of Google LLC. CodeOxi Mail Merge is an independent product and is not affiliated with or endorsed by Google.
Google user data we access, and why
- Send email on your behalf (
gmail.send): used only to send the messages you compose and start in the extension, to the recipients you choose. The extension cannot read, search or delete your email. - Read Google Sheets you select (
spreadsheets.readonly): used only to load the recipient list and merge fields from a spreadsheet you paste or pick. The extension does not modify your spreadsheets. - Your Google account name, email address and profile picture: shown in the extension and used as the sender address.
Where your data is stored
Your sign-in token, contact lists, templates, sender identity and settings are stored locally in your browser (Chrome extension storage) and stay on your device. Recipient lists and email content are sent directly from your browser to Google's Gmail and Sheets APIs. They are not sent to CodeOxi servers.
License check
If you activate a Pro license, the extension sends your license key, the extension version, and a one-way hash (SHA-256) of the Google account address you signed in with to the CodeOxi license server. The hash identifies the account the license belongs to, so reinstalling the extension does not use up another seat; your email address itself is not sent. No email content, contact data or other Google data is sent.
Optional AI features
The AI writing features use an API key that you provide for an AI provider you choose (OpenAI, Anthropic, Groq or Google Gemini). When you use them, the text you ask the AI to write or rewrite is sent from your browser directly to that provider under your own account and their privacy policy. CodeOxi does not receive it. Data obtained through Google APIs is never used to train AI models.
Limited Use
CodeOxi Mail Merge's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and no person at CodeOxi reads it.
Unsubscribe
Every email sent with the extension includes a way for recipients to opt out: a footer asking them to reply "Unsubscribe" (or "Huỷ đăng ký" in Vietnamese emails) and a List-Unsubscribe header that Gmail shows as an Unsubscribe button. Senders are responsible for honouring these requests and for complying with anti-spam laws where they send.
Removing your data
Sign out in the extension and uninstall it to delete everything it stored in your browser. You can also revoke its access at any time at myaccount.google.com/permissions. To ask about a license record, email us.
Changes
If we add features that send data to our servers (for example open and click statistics), we will update this page before they are released and describe exactly what is collected.
Contact
Questions about this policy: [email protected].