← QuillReply

Privacy Policy

Last updated: August 17, 2026. QuillReply is in beta; this policy describes what the product does today and will be updated at launch.

The short version

What the extension can and cannot see

QuillReply is a browser extension. Its only host permission is our own API. It requests no Gmail OAuth scope of any kind: not read, not modify, not compose. When you click a QuillReply button on an open email, the extension reads that message from the page you are already looking at, the same way you do. If you never click a button on an email, QuillReply never sees it.

What happens to an email you act on

When you ask for a draft reply or a task suggestion, the subject and body of that one message are sent over TLS to our servers, passed to our AI provider (Anthropic) to generate the result, and returned to you. The content is then discarded: not written to a database, not written to a log, and not retained by the AI provider. Quoted history from older messages in the thread is stripped in your browser before anything is sent.

Your writing voice

When you teach QuillReply your voice from an email you wrote, we derive a short style description: roughly how formal you write, typical reply length, whether you use contractions, and the shape of your greeting and sign-off, stored as patterns rather than text addressed to anyone real. The description contains no message text, names, companies, or subject matter.

What we store on our servers

DataPurposeRetention
An opaque account identifierIdentify your subscription and usage. Not your email address.Until you delete your account
Subscription status and Stripe ids (at paid launch)BillingUntil deletion, then as long as tax law requires
Monthly counts of actions usedEnforce the free tier and detect abuse24 months
Queued Apple Reminders items (title, note, due date, list name)Hold the reminder until your device collects itDeleted on collection, or automatically after 30 days
Reminders list names your device reportsShow you an accurate list pickerUntil you disconnect

We do not store: your email address, your name, message content, subject lines, generated drafts, prompt logs, or your task manager credentials.

Apple Reminders

Apple provides no way for a web service to write to Apple Reminders. Some tools work around this by asking for your Apple ID and an app-specific password. We do not, and we will not. Instead, a Shortcut on your own device collects your queued reminders under a random token, and Apple's own Reminders engine writes them locally. We never receive or store any Apple credential.

Other task managers

Connect Google Tasks or another task manager and the resulting access token is stored in your browser's own extension storage. It is never transmitted to our servers, and we cannot read your tasks.

Who else processes data

ProcessorWhat it handles
AnthropicGenerates drafts and task suggestions from message text you act on, under zero-retention, no-training terms
Our hosting providerRuns our servers and database
Stripe (at paid launch)Payment processing. Stripe holds your payment details; we never see a card number.

We do not sell your data or share it with anyone else.

Deleting your data

Open the extension's settings and choose Delete my data. This revokes any Apple Reminders relay token, deletes queued reminders, and marks your account for deletion; everything is purged within 30 days, with billing records retained only as long as tax and accounting law requires. Uninstalling the extension alone does not signal our servers, so use the settings option.

Security

TLS in transit, encryption at rest. Apple Reminders relay tokens are stored hashed and are scoped so they can do nothing except collect that one user's queued reminders. If we discover a breach affecting your data, we will notify you and the relevant authorities as required by law.

Children

QuillReply is not directed to anyone under 16 and we do not knowingly collect their data.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal data. Contact us at the address below and we will respond within 30 days.

Changes and contact

Material changes will be posted here with an updated date. Questions and requests: hello@quillreply.com.