Will This Plugin Send My Data to Your Server?

I want to know If this plugin will send my data to your server.

This plugin needs access to my inbox. Will it make a copy of my data and send it to your server?

Your personal emails stay on your device. You can also see the FlowCrypt Privacy page for more info.

The only things for which servers are needed are the ones that make this work. For instance, when you’re writing to someone, the plugin checks with the servers to see if the other person is using encryption. Similarly, when you installed it, it noted that your email is capable of receiving encrypted messages.

One exception is when you use the Secure Compose option to write someone who doesn’t use encryption, and you’re asked for a one-time password to protect the message. Such messages are relayed through FlowCrypt servers, but we don’t have access to the content, because only you and your recipient will know the password it was protected with. Additionally, we only store them temporarily and delete them regularly.

The reason the extension needs access to your email provider (e.g. Gmail) is that otherwise, it would be impossible to send attachments, work with received attachments that are encrypted, etc. The access is strictly limited to your device by design.

It’s the same as setting up a new email client on your computer or phone. It requires access to your email to be able to pull the emails to your computer and show them to you. The exception is FlowCrypt’s case, as it also encrypts and decrypts them using PGP end-to-end encryption.