This policy explains what GPT-6.1 Workspace (the “extension”) does with your data. Short version: we don't sell data, we don't run ads or analytics, and we don't store your content on our servers.
- No account, no Google sign-in and no Google API permissions (OAuth) are needed.
- Content (your question and the email, document, sheet, page, file or screenshot you choose to include) is sent to our server and to the AI provider only to generate the answer, and is not stored by us.
- Pages and Google files are read only when you ask — never in the background.
- Your chat history, assistants and settings stay in your browser. You can delete everything from the menu.
- Our server keeps only an anonymous install ID, a hashed access token, the extension version and daily request counters.
1. Who we are
GPT-6.1 Workspace is published by Tamara Lapatovene. Contact: tamaralapatovene@gmail.com.
2. Data we process
| Data | When | Why | Stored by us? |
|---|---|---|---|
| Your messages, prompts and chosen assistant instructions | When you send a message or click an action | To generate the answer | No |
| Content of the current email thread, Google Doc, Sheet, Slides deck, Drive view or web page; selected text | Only when you include it (page chip, action buttons, in-page bar, context menu) | To answer about it or edit it | No |
| Files and images you attach, area screenshots | When you attach them or take a screenshot | To answer about them | No |
| Image prompts and generated images | When you use image generation | To create the image | No |
| Voice input | While voice input is on | Speech-to-text by your browser's built-in speech recognition (provided by your browser vendor) | No |
| Anonymous install ID, hashed token, extension version, daily request counters | First request and each request | Fair-use limits and abuse protection | Yes, until you delete your data or stop using the extension |
We don't collect your name, email address, Google account details, browsing history, location or payment information.
3. Data stored only in your browser
Chat history (including generated images), custom assistants and settings are stored with chrome.storage.local on your device. Use “Clear chat history” or “Delete all my data” in the menu, or uninstall the extension, to remove them.
4. Service providers
- OpenRouter routes AI requests to model providers such as OpenAI (GPT-6.1 models and image models) and, as a fallback for images, Google. They process the content to return a response under their own terms and privacy policies.
- Railway hosts our API server and its database (counters only).
We use no analytics, advertising or tracking tools, and no remote code.
5. Browser permissions
- sidePanel — shows the assistant next to the page.
- storage, unlimitedStorage — keep chats, images and settings locally on your device.
- contextMenus — “GPT-6.1 Workspace” actions when you right-click selected text or a page.
- scripting, activeTab — read the current page or insert an answer into it when you ask.
- clipboardWrite — copy answers and paste them into Google Docs and Sheets.
- Access to mail.google.com, docs.google.com, drive.google.com and googleusercontent.com — show the AI buttons and bars there and read the open file through your existing browser session when you ask (exports of Docs, Sheets and Slides may be served from googleusercontent.com).
- Optional access to other sites — requested only when you ask about a page on that site, or once for area screenshots.
6. Limited Use
The use of information received from your browser and Google products adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use it only to provide the features you request. We do not sell it, use it for advertising, use it to determine creditworthiness, or let humans read it, except with your explicit consent, for security purposes, or to comply with law.
7. Retention and deletion
Content is processed in memory and discarded after the response. The anonymous install record and counters are deleted when you choose “Delete all my data”; daily counters older than 90 days may be removed at any time.
8. Security
All traffic uses HTTPS. The AI key lives only on our server. Access tokens are stored on the server only as hashes.
9. Your rights
Depending on where you live (for example under the GDPR or CCPA) you may have the right to access, correct or delete data. Because we don't keep your content, “Delete all my data” in the menu removes everything we hold about your install. For questions, contact tamaralapatovene@gmail.com.
10. Children
The extension is not directed to children under 13 and we don't knowingly collect data from them.
11. Changes
We'll update this page when practices change and adjust the “Last updated” date. Significant changes will be shown in the extension.
12. This website
This website is a static site. It doesn't use cookies, analytics, advertising pixels or third-party embeds — fonts, images and videos are served from this domain. Like any web server, our hosting provider may keep standard technical logs (such as IP address, browser type, requested page and time) for security and reliability. We don't use them to identify or profile visitors.