Browser Extension Privacy Policy
Last updated: 20 July 2026
This policy explains exactly how the Unjam browser extension handles your data. It is separate from our website privacy policy, which covers only unjam.com.
The short version
The extension reads the email you are writing so it can offer you a more considered version in your own words. Your draft is sent securely for analysis, returned to you, and not stored on our servers. We never read your recipients, your contacts, or your other emails. The only thing we keep is content-free usage data, and it stays anonymous unless you choose to create an account.
Who we are
The Unjam extension is provided by Glyndwr Media Limited (company number 08764217), a company registered in England and Wales, whose registered office is at 37 Netherbury Road, London, W5 4SP. Glyndwr Media Limited is the data controller for the data described here. Questions: email privacy@unjam.com.
What the extension does
Unjam has a single purpose: when you are composing an email in Gmail, it reads your draft and, if the message is high-stakes, offers a more considered version written in your own voice. It can also help you prepare for the conversation the email is about. That is the whole function.
What it reads on the page
While you compose an email in Gmail, the extension reads:
- The text of the draft you are writing
- The subject line
- When you are replying, the single most recent message in the thread, for context
It does not read your recipients (the To, Cc, or Bcc fields), your contacts, your inbox, any of your other emails, or your activity on any other website. The extension only runs on Gmail and only looks at the message you are actively composing.
What happens to your draft
When the extension analyses a draft, the text of that draft and its subject line are sent over an encrypted (HTTPS) connection to our service, where they are processed by our AI provider to produce the considered version, which is returned to you. After that:
- Your draft is processed in memory and discarded. It is not written to any database or saved on our servers.
- Your draft is sent to our AI provider solely to generate the considered version, and for no other purpose.
- We do not record the content of your draft in our server logs.
What is stored, and where
On your own device only (in the browser’s local storage for the extension):
- A small number of short samples of your own writing, kept so the considered version can match your style. These stay on your device; they are sent with a request only to tailor the output and are not retained on our servers. You can clear them at any time.
- A random identifier for the install, your settings, and your preferences
- An organisation code, if your employer has given you one
- A sign-in token, if you choose to connect an account (see “Your account” below). Signing out or removing the extension clears it.
On our servers, we keep only anonymous, content-free usage data, so we can see whether the tool is working and improve it. Specifically:
- Which actions happened (for example, that a draft was analysed or a suggestion accepted)
- A category label for the type of message (for example, “performance”)
- Confidence scores and the length of text (a number, never the text itself)
- A short signal phrase, from which names, email addresses, dates, and phone numbers are automatically removed before it is stored
If you use Unjam without an account, this usage data carries a random identifier, not your name or email, and is not linked to your identity. If you connect an account, your content-free usage is linked to that account so we can show you your own patterns — it still contains no email content.
Your account (optional)
You can use Unjam without an account. If you choose to connect one — to save the writing voice the extension has learned, see your own patterns, or manage a subscription — you sign in with your email address, and the extension stores a sign-in token on your device. From then on, your content-free usage is linked to your account rather than to an anonymous identifier. We still never store the content of your emails. You can sign out at any time, which unlinks the extension from your account on that device.
If you subscribe to a paid plan, payment is handled by our payment provider, Stripe. We never see or store your card details.
What we never do
- We never store the content of your emails
- We never read your recipients, contacts, or other messages
- We never sell or rent your data, or share it with advertisers or data brokers
- We never use your data for advertising or to build a profile of you
- We never track your browsing
Who processes the data for us
We use a small number of service providers (processors) to run the extension. They act on our instructions, under contracts that require them to protect your data:
- Anthropic (United States) — provides the AI that produces the considered version
- Supabase (European Union region) — stores your account, if you create one, and the content-free usage data described above
- Stripe (United States and EU) — processes payments if you subscribe to a paid plan. We do not receive or store your card details.
- Vercel — hosts the service that the extension connects to
Where a provider is outside the UK or European Economic Area, we rely on appropriate safeguards recognised under UK and EU GDPR — such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the EU Standard Contractual Clauses — designed to give your data a comparable level of protection.
Our legal basis
We process your draft to provide the feature you installed the extension to use, on the basis of our legitimate interests under Article 6(1)(f) UK GDPR and EU GDPR in delivering a tool you have chosen and asked to run. You remain in control: the extension only acts on a message when you use it, and you can remove it at any time.
How long we keep it
Drafts are not kept — they are processed and discarded. The anonymous usage data is retained to help us improve the tool; because it contains no message content and is not linked to you, it cannot be used to identify you. Anything stored on your own device remains there until you clear it or remove the extension.
Your rights
Under UK and EU GDPR you have rights to access, correct, delete, restrict, and object to the use of your personal data, and to data portability. To exercise them, email privacy@unjam.com and we will respond within one month.
One honest note: the usage data we hold is anonymous and not linked to your identity, so in most cases we are not able to single out records as “yours”. The data that is genuinely about you lives on your own device — you can erase all of it instantly by removing the extension or clearing its storage.
Security
All communication between the extension and our service uses encrypted (HTTPS) connections and authenticated requests. We collect as little as possible by design, which is the strongest protection of all: the content of your emails is never at rest on our systems.
Children
Unjam is a tool for adults in a workplace setting. It is not directed at, or intended for, use by children.
Chrome Web Store Limited Use
Our handling of data obtained through the extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use the data only to provide and improve the user-facing features described above. We do not transfer it to others except as needed to provide or improve those features, to comply with applicable law, or as part of a merger or acquisition. We do not sell it, do not use it for advertising, and do not allow any person to read your email content except with your consent, for security purposes, or where required by law.
Changes to this policy
If we change how the extension handles data, we will update this page and the “Last updated” date above. For anything significant we will make the change obvious rather than quietly edit the text.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to a data protection authority — in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, the authority in your country (edpb.europa.eu).
