Privacy Policy
Gemlead for X Extension

Effective Date: September 18, 2026

This Privacy Policy describes how the Gemlead for X Chrome Extension ("Extension", "we", "us", or "our") collects, uses, and protects your information.

1. Information We Collect

The Extension only reads data when you are connecting an X account in Gemlead, or when you open the Extension popup:

• X session cookies from x.com and twitter.com, used to recognize the account you are already logged into.
• X CSRF token (ct0) and related session tokens needed to use that account inside Gemlead.
• Your X user ID and username, so Gemlead can show which account is connected.
• The URL of the active tab, only to tell whether you are on x.com, twitter.com, or gemlead.ai.

2. How We Use Your Information

The Extension shares that session with the Gemlead page you have open (gemlead.ai). Gemlead then uses it to:

• Connect your X account in one click.
• Sync your X inbox and conversations.
• Send direct messages you start in Gemlead.
• Load the public profile of the connected account.

The Extension never copies credentials to your clipboard. It never asks you to paste tokens.

3. Data Storage and Transmission

The Extension does not:

• Store your session in chrome.storage or on disk.
• Send data to any site other than the Gemlead page you opened.
• Track your browsing across the web.
• Collect analytics or advertising data.

Session data is read in your browser and passed to gemlead.ai through Chrome's extension messaging, only when you connect an account or open the popup.

4. Permissions

The Extension requires the following permissions:

• cookies: To read the X session you are already logged into.
• tabs: To read the active tab URL and show the right popup state.
• Host permissions for x.com, twitter.com, api.x.com, and api.twitter.com: To read those cookies and resolve the connected username. No other sites.

5. Security

The Extension only talks to x.com / twitter.com and to gemlead.ai pages. Credentials are not written to the clipboard and are not sent to unrelated third parties.

6. Third-Party Services

Once an X account is connected, that session is handled by Gemlead under Gemlead's Privacy Policy.

7. Your Rights

You have full control over your data:

• You can uninstall the Extension at any time to revoke all permissions.
• You can disconnect the X account from Gemlead at any time.

8. Children's Privacy

The Extension is not intended for use by children under 13. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated through an Extension update.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Gemlead, contact@gemlead.ai

Links