Privacy Policy for PSafe Email

Effective Date: October 13, 2026 | Last Updated: October 13, 2026

PSafe Email ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how our Chrome Extension operates, what data is processed, and our strict commitment to data minimization and user privacy.

1. Information We Collect and Process

To provide real-time heuristic analysis and phishing detection, PSafe Email processes specific data from your Gmail session:

• Email Links (URLs): The extension extracts hyperlinked URLs contained within the body of emails open in your active Gmail tab.
• Sender Metadata: Header details such as the From email address and display name are inspected to detect domain spoofing and sender impersonation.

Data We DO NOT Collect

• We do not collect or read the full body text, private personal messages, attachments, or passwords.
• We do not collect personal identification information (e.g., your real name, address, phone number).
• We do not track your browsing history outside of active Gmail tabs where phishing verification occurs.

2. How We Use Information

The data scraped locally by the extension is transmitted securely via HTTPS to our remote analysis engine (https://phish-shield-backend.onrender.com) solely for the following purposes:

• Phishing Detection: Analyzing links against heuristic rules (e.g., suspicious top-level domains, IP-based URLs, keyword manipulation).
• Spoofing Prevention: Verifying sender authentication consistency to protect you from spoofed addresses.
• Real-Time Alerts: Returning verification status ("Paws Approved" or warning flags) back to your browser interface.

3. Data Storage and Retention

• No Persistent Storage: PSafe Email operates on an ephemeral analysis model. Extracted URLs and header metadata are processed in-memory during the heuristic scan and are not saved or stored permanently on our servers.
• No User Profiles: We do not build user profiles, track user behavior over time, or store logs tied to individual identities.

4. Data Sharing and Third Parties

• No Data Selling: We do not sell, rent, trade, or monetize your data under any circumstances.
• No Advertising: Your data is never used for advertising, remarketing, or targeted marketing purposes.
• Third-Party Services: Our backend is hosted on Render. Server request logs maintained by infrastructure providers are governed by their respective privacy standards and are used strictly for service availability and security operational monitoring.

5. Security Measures

We implement industry-standard security practices to protect data during transmission:

• All communications between the browser extension and our analysis server use secure HTTPS encryption (TLS/SSL).
• Requests are handled statelessly to minimize exposure.

6. Permissions Justification

To function correctly, PSafe Email requests the following Chrome permissions:

• activeTab: Allows the extension to interact with the currently active Gmail tab to scan email content when commanded.
• host_permissions (https://mail.google.com/*): Required to inspect DOM elements specifically within Gmail to extract suspicious links.
• host_permissions (https://phish-shield-backend.onrender.com/*): Required to send extracted links to our dedicated analysis engine for threat evaluation.

7. Compliance with Web Store Policies

PSafe Email complies strictly with the Google Chrome Web Store User Data Policy, including the Single-Purpose Requirement and Limited Use restrictions.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect improvements to our extension or legal requirements. Any updates will be posted with a revised "Last Updated" date at the top of this document.

9. Contact Us

If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact us at:

• Project: PSafe Email
• Support Email: support@psafe-email.com