Privacy policy
Last updated 2026-10-25.
What the add-on does
When you open an email in Gmail, the add-on looks up the sender (or, for an email you sent, the first recipient) in your Pipedrive company and shows the person, their organization and their open deals in the sidebar. It only reads from Pipedrive. It never changes anything in Pipedrive or in Gmail.
Google permissions
gmail.addons.execute: lets the add-on run in Gmail.gmail.addons.current.message.metadata: the From and To addresses of the email you have open, only while it is open.userinfo.email: your Google email address, to know which Pipedrive connection is yours.
We never read the body of your emails, your attachments, or any email other than the one you have open. We cannot send, delete or change email.
What we store
- Your Google email address.
- Your Pipedrive connection: access and refresh tokens (encrypted), your Pipedrive company's web address and name, and the custom fields you chose to show.
- Pipedrive details shown on the card (name, emails, phones, organization, open deals and the custom fields you chose), stored encrypted. Lookups are cached for 10 minutes. A backup copy is kept for 24 hours and is only shown when Pipedrive's daily API limit is reached. Then it is deleted.
- When you subscribe: your Stripe customer id and subscription status. Card details are held by Stripe, never by us.
We do not store email subjects, email bodies or the email addresses of emails you open, except as the key of a cached lookup for the times above.
Who we share it with
We do not sell your data. We share it only with the services that run the add-on: Pipedrive (to look up contacts), Google (to read the open email's addresses), Render (hosting and database) and Stripe (billing). We do not use analytics or tracking, and we show no ads.
Google API data
Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to show you the matching Pipedrive contact, is not used to train any AI model, and is not read by people.
Deleting your data
Uninstall the add-on in Google, or remove the app in Pipedrive (Tools and apps, Marketplace apps). To have your connection deleted from our database, email us and we delete it within 7 days. Cached lookups expire on their own within 24 hours.