Privacy Policy

Last updated: October 15, 2026

Mailmole is a browser extension that summarizes long emails and drafts replies in Gmail and Outlook on the web. It is made by Dumlabs ("we", "us"). This policy explains what data Mailmole handles, why, and what control you have. Questions go to hello@dumlabs.dev.

The short version

Mailmole reads an email only when you press Summarize or Draft reply, and only the email you have open.
That email is sent through our server to Anthropic's Claude AI to write the summary or draft. We do not store it or log it.
We keep your account email, your plan, and counts of how many summaries and drafts you've used. That's it.
We never sell your data, show ads, or use your email to train AI models.
You can ask us to delete your account at any time.

What Mailmole reads, and when

Mailmole runs on Gmail and Outlook web pages so it can find the email you have open. It does nothing with your mail until you ask. When you press Summarize or Draft reply, it reads the open email or thread (or the text you have selected): the subject, the senders and recipients shown on the page, the message text, and the names of any attachments. It does not open attachments, read other emails in your inbox, or run in the background.

Find cases (Casemole). When you tap Find cases on your inbox page, Mailmole reads the inbox rows visible on your screen at that moment (subject, preview line and sender) and looks for case or ticket numbers in your browser. It uses no AI, sends nothing to us or anyone else, and reads nothing that isn't on screen. Only the cases you choose to track are saved.

For a reply draft, Mailmole also sends the instructions you type (for example, "say yes but push to Friday"), your chosen tone, the name you sign with, and any samples of your own writing you saved in Settings (so drafts match your voice). When you choose to insert a draft, Mailmole places it in your mail's reply box. It never sends email for you.

What we collect and keep

Data	Why	How long
Email content you ask Mailmole to summarize or reply to, and your reply instructions	To produce the summary or draft	Not stored by us. It passes through our server to Anthropic and is discarded once the result comes back.
Account email address	To sign you in with a one-time code and contact you about your account	Until you delete your account
Sign-in records: one-time codes, session tokens, and sign-in logs (time, IP address, browser type)	To keep your account secure and prevent abuse	Codes expire within an hour. Logs are kept for a limited period by our database provider.
Usage records: whether each action was a summary or a reply, the time, the AI model used, how much text it processed (token counts), and the estimated cost	To enforce your plan's monthly allowance and keep Mailmole affordable	Until you delete your account
Plan and billing status: your plan, your Stripe customer and subscription IDs, subscription status, and renewal date	To give you the plan you paid for	Until you delete your account, except records we must keep for tax and accounting

Payment details. Card numbers and billing addresses are entered on Stripe's checkout page and are held by Stripe, not by us. We see only your plan, payment status, and the receipts Stripe makes available to us.

Invites. Each account has an invite code. If someone signs up from your invite link, we record which account invited which (account ids only), so we can give you both bonus actions after their first summary. The mailmole.app page keeps the invite code in your browser for up to 30 days so the extension can pick it up after you install it.

Product counts. To see where people get stuck, we count a few steps once per account: signed in, first summary, fifth summary, started an upgrade, upgraded. Each is a row with your account id, the step and the date, and nothing about your email. A visit to our welcome page is counted once per browser with no account, cookie or identifier attached. We use no third-party analytics or trackers.

Monday email. If you used Mailmole in the past week, we send one short email on Monday with counts only: how many threads Mailmole summarized and replies it drafted, a rough estimate of minutes saved, and how many actions you have left. It never contains email content. It is sent through Resend from mailmole.app. Every email has a one-click unsubscribe link, and you can switch it off in Mailmole's settings.

Goodbye survey. If you remove Mailmole, Chrome opens a one-question page asking what didn't work. If you answer, we save only the reason you pick and any short note you type, with no account or email address attached.

Stored in your browser. The extension keeps your sign-in session, your default reply tone, your signature name, any writing samples and saved answers you keep, your Casemole cases (case number, subject, customer name, status, dates and a link to the thread) and Notemole notes, and a count of summaries (used once to ask for a rating) in your browser's local extension storage on that device. Recent summaries are kept in the browser's memory until you close it, so reopening an unchanged thread doesn't use an action. It is not synced to other devices, and removing the extension deletes it.

No tracking. Mailmole has no advertising and no third-party analytics in the extension or on this website, and this website sets no cookies.

Who we share it with

We use a small number of service providers to run Mailmole. Each gets only what it needs to do its job:

Anthropic (Claude AI) receives the email content and instructions for each action you request, and returns the summary or draft. Anthropic processes this under its commercial API terms: it does not use it to train its models and keeps it only for a limited time, for purposes such as safety and abuse monitoring.
Supabase hosts our server, database, and sign-in system, and holds the account, usage, and plan data described above.
Resend delivers your sign-in code emails and the Monday email, so it receives your email address and those emails' text (codes and counts only).
Stripe processes payments and manages subscriptions, cancellations, and receipts.
Cloudflare provides the domain and network for mailmole.app.

We do not sell or rent your personal information, and we do not share it for advertising. We may disclose information if the law requires it, to protect people's safety or our rights, or as part of a sale or merger of the business, in which case this policy continues to apply to your data.

Google and Microsoft account data

Mailmole is not made by, affiliated with, or endorsed by Google or Microsoft. It does not ask for access to your Google or Microsoft account and does not use their APIs; it reads only what is shown on the mail page in your browser when you ask it to.

Mailmole's use of information from your mail complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use it only to provide the summary and reply features you request. We do not transfer it except to provide those features, comply with law, or as part of a merger or sale of the business. We do not use or transfer it for advertising, to determine credit-worthiness, or for lending. No person at Dumlabs reads it.

Where data is processed

Dumlabs is based in the United States. Our providers may process data in the United States and other countries. Where the law requires it, we rely on our providers' standard contractual protections for international transfers.

Your choices and rights

Use it only when you want. Mailmole sends nothing until you press a button.
Cancel your plan anytime from Settings → Manage plan in the extension.
Access, correct, or delete your data. Email hello@dumlabs.dev from your account email. We will delete your account, usage records, and plan data within 30 days, except billing records we must keep by law.

Depending on where you live (for example, the European Union, the United Kingdom, or California), you may have additional rights, such as the right to receive a copy of your data, to object to or restrict processing, or to complain to a data protection authority. Contact us and we will respond within the time the law requires. We process your data to provide the service you signed up for (performance of a contract), to keep it secure and prevent abuse (legitimate interests), and to meet legal obligations such as tax records. We do not sell or "share" personal information as California law defines those terms.

Security

Data travels over encrypted connections (HTTPS). Our AI key is held only on our server, never in the extension. Access to the database is limited. No system is perfectly secure, so if we learn of a breach affecting your data, we will tell you as the law requires.

Children

Mailmole is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has signed up, contact us and we will delete the account.

Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, such as storing email content or adding a new kind of data sharing, we will tell you in the extension or by email before it takes effect.

Contact

Dumlabs, operator of Mailmole
Email: hello@dumlabs.dev