Privacy Policy
Last updated July 2026
This Privacy Policy explains what information Email Extractor(“we”, “us”) collects, how we use it, and the choices you have. Email Extractor is a Chrome extension that helps you find and collect publicly displayed email addresses on the web pages you visit, operated by Mailsumo (mailsumo.io). Where you hold a Mailsumo account, signing in, billing and account deletion all happen there.
Information we collect
- Install token: the extension generates a random identifier stored locally in your browser. It identifies your installation and premium status without requiring an account.
- Captured emails: if you enable AutoSave, the email addresses found on pages you visit are saved to our servers together with the source URL and the date and time they were first seen.
- Billing data: your subscription status, plan, and the email address you subscribe with. Payments run through Stripe and card numbers never reach our servers.
- Basic usage events: limited, non-identifying telemetry about feature usage so we can keep the product working.
How we use information
- To provide AutoSave and Automation, and to let you export what you have collected.
- To determine and enforce your subscription and its allowance.
- To send transactional email such as your access token and billing notices.
- To maintain, secure and improve the service.
Legal basis for processing
Under the GDPR we process your personal data on the following bases:
- Performance of a contract: to deliver the features you sign up for, including AutoSave, Automation, export and managing your subscription.
- Consent: for optional communications such as product emails. You can withdraw consent at any time.
- Legitimate interests: to secure, maintain and improve the service and to prevent abuse, where those interests are not overridden by your rights.
- Legal obligation: to comply with accounting, tax and other applicable legal requirements.
Third parties
We do not sell your data. We share it only with the processors that operate the product on our behalf: Stripe (payments), Postmark (transactional email) and Railway (hosting), each under their own terms and only as needed to run Email Extractor.
International data transfers
Some of those processors store or handle data outside the European Economic Area; captured emails and account data are hosted on infrastructure in the United States. Where we transfer personal data outside the EEA we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
Data retention & deletion
Captured emails are retained while your subscription is active, and for a reasonable period afterwards so you can resubscribe without losing your list. You can stop AutoSave at any time, and you can permanently delete your account and everything attached to it from the Account page in your Mailsumo dashboard, or by emailing us.
Your rights
Under the GDPR and similar laws you have the right to:
- Access a copy of the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasureof your data (the “right to be forgotten”).
- Restriction of processing in certain circumstances.
- Data portability, receiving your data in a machine-readable format.
- Objection to processing based on our legitimate interests.
- Withdrawal of consent at any time, where processing relies on it.
You also have the right to lodge a complaint with your local data protection authority; in Belgium that is the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit).
Cookies & tracking
This website uses only the essential cookies needed for core functionality, such as keeping you signed in and securing form submissions. We use no advertising or third-party tracking cookies. The extension’s token is stored locally in your browser and is not a cross-site tracking identifier.
Security
We protect your data with encryption in transit (TLS), access controls, and reputable infrastructure and payment providers. No method of transmission or storage is completely secure, so while we work to protect your data we cannot guarantee absolute security.
Children’s privacy
Email Extractor is intended for people aged 16 or older and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.
Responsible use
You are responsible for complying with the laws that apply to you, including anti-spam and data protection laws, when you collect and use email addresses. Do not use Email Extractor to build spam lists.
Changes to this policy
We may update this policy from time to time. When we do we revise the date above and, for material changes, notify you by email where appropriate.
Data controller & contact
Email Extractor is operated by Mailsumo (mailsumo.io), the data controller. Questions or data requests? Email [email protected].