Privacy Policy

Baxter (“Baxter”, “we”, “us”) helps you organize your Gmail inbox — labeling and foldering senders, bulk-unsubscribing from newsletters, auto-cleaning unwanted mail, and drafting replies you review. This policy covers all of Baxter:

• Baxter — the full Chrome extension for Gmail (labels and folders, bulk remove, Auto-Clean, Baxter AI, Dictate Draft, AI reply drafts).
• Gmail Unsubscribe by Baxter — our free Chrome extension that adds bulk unsubscribing to Gmail.
• The Baxter dashboard at customer.usebaxter.com, where you manage senders, labels, rules, drafting and your subscription.

It explains what information we collect, how we use it, and the choices you have. By using Baxter you agree to this policy. Both extensions use the same Google permissions described in section 03 — the free tool simply uses fewer of the features they enable.

Google account & Gmail data. When you connect your Google account through Google OAuth, and only with your permission, we process:

• Message metadata — sender name and address, subject, labels, and dates — to build your sender list and folders.
• Message content — processed to categorize mail into your folders and, if you turn on AI reply drafts, to write a draft in your voice. Processing may use trusted AI providers acting on our behalf (section 06). Message bodies are removed from our systems shortly after processing; we keep the labels and categories.
• Drafting data (only if you enable AI reply drafts) — the drafts we write for you, a writing-style profile derived from how you write, and any notes you add to your drafting knowledge base. If you use Dictate Draft, your voice recording is transcribed to text to carry out your instruction. All of this is part of your account data and is deleted with it.
• Mailbox changes you ask for — applying labels, archiving or deleting mail per your rules, unsubscribing from senders you select, creating reply drafts (never sending them), and managing the Gmail filters described in section 03.

Account & billing information. We store your name, email address, and preferences. Payments are processed by Stripe; we never see or store your full card details.

Usage & support data. We collect limited product-analytics events (for example, which features are used) to improve Baxter, and any messages you send us through support or the in-app chat.

• Basic profile and email address — to identify your account and show you which mailbox is connected.
• Read, compose, and send emails from your Gmail account (gmail.modify) — to label and folder your mail, archive or clean it according to rules you create, send unsubscribe requests on your behalf, and place AI reply drafts in your Drafts folder. Baxter never sends a reply itself — drafts always wait for you.
• See, edit, create, or change your email settings and filters (gmail.settings.basic) — used only when you unsubscribe from a sender. Because unsubscribe links are often ignored or missing, Baxter also creates a Gmail filter that archives that sender's future mail. If you undo the unsubscribe, we delete that filter. Every filter Baxter creates belongs to a sender you can see and manage in your dashboard, and we never touch other settings — no forwarding, vacation responders, or delegates.

• Organize your inbox — apply labels/folders, unsubscribe, auto-clean, and draft replies you review.
• Operate your account, process billing, and provide customer support.
• Maintain, secure, and improve the product.
• Comply with legal obligations.

Baxter's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide and improve user-facing features, we do not transfer it except as necessary to provide those features (or for security, legal, or as part of a merger), and no humans read your email except with your explicit consent, for security, or as required by law.

We share data only with service providers who help us run Baxter — Google (Gmail access), Stripe (payments), cloud hosting, analytics, and AI providers (such as OpenAI) that process message content solely to generate your labels, drafts, and assistant answers — each bound to protect your data. Our agreements with AI providers prohibit them from using your data to train their models. We may also disclose information if required by law or to protect our users and services.

• While you use Baxter — we keep your data only as long as your account is active or as needed to provide the service. Message bodies are removed shortly after processing (section 02).
• Deactivating — from Account Settings removes the labels and folders Baxter created; your email itself is never deleted. Gmail filters Baxter created stay visible in your Gmail settings, where you can remove them at any time.
• Full deletion — to delete your account and associated data entirely, email [email protected]. You can also revoke Baxter's Google access at any time via your Google account permissions.

• Encryption everywhere — all data moves over TLS, and your Google OAuth tokens are stored encrypted at rest with authenticated encryption (AES-GCM). We never see or store your Google password.
• Data minimization — we request only the scopes Baxter needs (section 03), process the minimum data required for each feature, and purge message bodies from our systems shortly after processing.
• Least-privilege access — production data access is restricted to the operators who run the service, and no humans read your email except with your explicit consent, for security, or as required by law.
• Independent security assessment — because Baxter uses restricted Gmail scopes, our application undergoes Google's mandated security assessment, renewed annually through Google-approved assessors.
• Payment isolation — card details go straight to Stripe; they never touch our servers.

No method of transmission or storage is 100% secure, but we work continuously to safeguard your data and review our practices as the product evolves.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise these rights, contact [email protected].

Baxter is not directed to children under 13, and we do not knowingly collect their data.

We may update this policy from time to time. Material changes will be posted here with a new “Last updated” date.

Questions about this policy? Reach us at [email protected].