Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Sign-in: when you sign in to PlexAI from the Extension or Add-in, your email address and authentication tokens (access token, refresh token, ID token) are received from PlexAI and stored securely on your device so you don’t have to sign in on every page or taskpane load. Sign-in uses secure browser and Office redirect mechanisms (Chrome: *.chromiumapp.org; Firefox: *.extensions.allizom.org; Outlook: Office Dialog API).
• Missed-deal reports: if you use the “Report missed deal” feature, we collect the email thread/conversation ID and URL, the subject line and sender email read from that email item, and any notes or reason you provide.
• Pass-on replies: when you dismiss a deal and your PlexAI account is configured to reply, the Extension shows you a draft reply to the deal’s original sender. If you choose to send it, the recipient address, subject, and message text you approve are sent to PlexAI’s servers, which send the reply through the mailbox connected to your PlexAI account. Nothing is sent unless you confirm.

1.2 Information Collected Automatically From Email Clients (Gmail & Outlook)

While you are viewing emails with the Extension or Add-in installed and you are signed in to PlexAI, the application reads and transmits to PlexAI’s servers:

• Thread & Conversation Identifiers — Gmail’s internal thread ID or Outlook’s Conversation ID / Internet Message ID, used to look up whether an email is already linked to a PlexAI deal.
• Your active mailbox address — your active Gmail or Outlook email address, used to confirm the active mailbox matches the account connected to your PlexAI deals.

The Extension does not read, transmit, or store the body, attachments, or contents of your emails. It only reads thread / conversation identifiers and the currently signed-in email address. The Extension does not use tracking cookies for third-party advertising or third-party analytics services.

1.3 Information Stored Locally on Your Device

The Extension uses local client storage (browser extension storage or Office add-in storage) to store, entirely on your device:

• Your current PlexAI session (tokens and email), so you don’t need to sign in repeatedly.
• A list of thread / conversation IDs for which you’ve already submitted a missed-deal report.

Separately, a short-lived in-memory cache (up to a few minutes) is maintained to remember which threads have already been matched to a deal, avoiding unnecessary network requests. This cache is not written to disk and is cleared when entries expire or when the extension/taskpane restarts.

This data stays on your device and is not shared with anyone except as described in Section 1.2.

1.4 Information From Other Sources

The Extension does not connect to, or receive data from, any third-party service — it only reads the email metadata described in Section 1.2 and your own PlexAI account data.

Deal badges and previews only appear when your signed-in PlexAI account already has a mailbox connected on the Platform. That connection and its data handling are set up through the main PlexAI web app and are governed by the Platform Policy, not by this document.

1.5 Deal Data Shown in the Extension

When an email thread matches an existing PlexAI deal, the Extension fetches and displays deal information from PlexAI’s servers — such as deal name, status, photos, and brokerage details. This data comes from your PlexAI account, not from your email provider.

2. How We Use Information

We use the information described in Section 1 to:

• Operate, maintain, and improve the Extension and Add-in;
• Authenticate you and keep you signed in to PlexAI within the Extension / Add-in;
• Match the email thread or conversation you’re viewing to an existing PlexAI deal and display a badge or sidebar preview;
• Let you move a deal between Deal Log, Pipeline, and Archive, or dismiss it, directly from your inbox — and, when you dismiss, optionally send a pass-on reply you have reviewed to the deal’s original sender;
• Let you report an unlinked thread as a missed deal, and notify our team so it can be reviewed;
• Provide customer support and respond to inquiries;
• Detect, prevent, and address technical issues or misuse;
• Comply with applicable legal obligations.

We do not use this information for advertising, and we do not sell it.

We limit use of user data to providing and improving the Extension’s stated features. We do not use user data for unrelated purposes such as advertising, creditworthiness, or resale to data brokers.

3. Data Storage and Retention

All data transmitted to PlexAI by the Extension is securely stored on Amazon Web Services (AWS) servers located in us-east-1 (Virginia, USA). Data is transmitted over encrypted connections (HTTPS).

Deal links and missed-deal reports are retained until you or PlexAI delete them. Once deleted, data is permanently removed from our active systems within a reasonable timeframe, subject to standard backup and archival processes.

Data stored in local client storage (Section 1.3) persists until you uninstall the Extension/Add-in or clear client storage. Your PlexAI session is cleared immediately when you sign out; other locally stored items (such as reported-thread IDs) remain until uninstall or storage clear. Thread-match cache held in memory expires within minutes or when the extension/taskpane process restarts.

4. How We Share Information

We do not sell or rent information collected through the Extension. We may share it only:

• Service Providers: with vendors that provide cloud hosting (AWS) or other operational support under confidentiality agreements. When you submit a missed-deal report, an internal notification may be posted to our team’s Slack workspace so it can be reviewed by authorized PlexAI personnel.
• Mailbox connection: separately from anything the Extension sends, if your PlexAI account has a mailbox connected for deal intake, that connection is handled at the Platform level as described in the Platform Policy — not by the Extension.
• Legal and Regulatory: when required by applicable law, regulation, subpoena, or legal process.
• Business Transfers: in connection with a merger, acquisition, financing, or sale of assets, provided the successor entity continues to protect your information in accordance with this policy.

We do not transfer user data to advertising platforms, data brokers, or information resellers.

5. Data Security

We implement administrative, technical, and physical safeguards to protect your data from unauthorized access, use, or disclosure. This includes encryption in transit and at rest, network security measures, and access controls. PlexAI is committed to maintaining enterprise-grade security and is actively pursuing SOC 2 certification as part of its compliance roadmap.

6. Chrome Web Store and Google User Data

If you install the Extension from the Google Chrome Web Store, the following also applies.

The Extension accesses metadata visible on mail.google.com (such as thread identifiers and your active Gmail address) only to provide the user-facing features described in this policy. We do not use that data for advertising, to determine creditworthiness, or for purposes unrelated to the Extension’s function.

Limited Use: The Extension’s use of user data obtained from Gmail complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We limit use of such data to providing or improving the Extension’s stated features, do not sell or transfer it for unrelated purposes, and do not allow human review of user data except where you explicitly submit a missed-deal report or contact us for support.

7. Microsoft AppSource and Outlook Add-in Data

If you install the PlexAI for Outlook Add-in through Microsoft AppSource or sideloading in Microsoft Outlook, the following also applies.

The Add-in accesses metadata from Microsoft Outlook (specifically conversation IDs, item IDs, and active user mailbox addresses) solely via official Office.js APIs to resolve corresponding deals in your PlexAI account. The Add-in operates strictly over secure HTTPS connections, does not read or store email contents or attachments, and does not share data with any advertising network.

8. Your Choices and Rights

You may:

• Sign out of the Extension or Add-in, which clears your locally stored session immediately;
• Uninstall the Extension or Add-in, which removes all on-device data described in Section 1.3;
• Access, update, or delete your account information and uploaded materials through your PlexAI account;
• Contact us to request a copy or deletion of your data.

To exercise these rights, contact us at ran@acqwiz.ai. We may verify your identity before fulfilling certain requests.

On Firefox 140+, you can also review the Extension’s declared data collection categories during installation through Firefox’s built-in consent experience.

9. Children’s Privacy

Our Services are intended for professional and corporate use only. We do not knowingly collect or process personal information from individuals under 18 years of age.

10. Data Transfers

Since all customer data is hosted and processed in the United States (AWS us-east-1), you acknowledge that your information will be transferred to and maintained in the U.S., where privacy laws may differ from those in your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. Updated versions will be posted on our website with the revised effective date. Continued use of the Extension or Add-in after such updates constitutes acceptance of the revised policy. If our data handling practices change materially, we will update this policy and, where required by applicable store policies, notify users before applying the change.

12. Contact Us