Date: July 13, 2025
Last updated: July 13, 2025

1. Overview

Izimail delivers AI-powered email assistance via:

  1. Chrome Extension – direct integration into email platforms

  2. Web Application – user management, subscriptions, and analytics dashboard

2. Information We Collect

2.1 Chrome Extension

  • Local (not transmitted):

    • User preferences (language, feature toggles)

    • Authentication tokens

    • Subscription status ([insert validity period])

    • UI settings

  • Transmitted to our servers (only on request):

    • Email content submitted for AI assistance ([retention period] days)

    • Anonymous action logs ([retention period] days)

    • Email address and session info

    • Aggregated usage analytics

  • Not collected:

    • Email metadata (subject, recipients, timestamps)

    • Personal data beyond email address

    • Browsing history outside email composition

2.2 Web Application

  • Collected:

    • Account info (email, encrypted password)

    • Subscription details (plan, billing via Stripe)

    • Dashboard analytics

    • Session and auth tokens

  • Not collected:

    • Personal documents beyond email content

    • General browsing history

3. How We Use Your Information

  • AI processing (Google AI: email content)

  • Service improvement (usage analysis)

  • Quota management

  • Customer support

4. Data Storage & Security

  • Local (extension): encrypted storage until uninstall

  • Cloud (Supabase, USA): encrypted PostgreSQL, [legal retention period]

  • Transmission: HTTPS + JWT

  • Processors: Stripe, Supabase, Google AI (SCC in place)

5. Your Rights & Choices

  • Access, correction, deletion, portability: contact formulaire on website izimail.io

  • Withdraw consent (analytics, marketing): contact formulaire on website izimail.io

  • Complaints: supervisory authority (e.g., CNIL) contact formulaire on website izimail.io

6. International Transfers

  • Storage location: United States

  • Safeguards: Standard Contractual Clauses

7. Children’s Privacy

  • Minimum age: 18

8. Data Breach

  • Notify authority within 72 h

  • Inform users within 72 h

9. Changes to This Policy

  • Notify 30 days before changes

  • Continued use = acceptance

10. Contact Information