Is UserGems AI Copilot Chrome Extension safe?

Clean risk

UserGems AI Copilot Chrome Extension sends CRM page context URLs to app.usergems.com.

On Outreach, Salesloft, Salesforce, HubSpot, and Gong pages, the content script injects an app.usergems.com iframe when it detects eligible CRM contexts. Every second it posts the current context URL, email-task state, and overlay visibility to that iframe, including CRM record URLs or IDs derived from the page.

UserGemsv1.55Chrome Web Store
0Risk
Who publishes it

ShelfFlip, Inc. dba UserGems - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
UserGems
Declared legal entity
ShelfFlip, Inc. dba UserGems
Registered address
2443 Fillmore St #380-3416, San Francisco, CA 94115, US
Registered contact
Roland Fiala

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed UserGems AI Copilot Chrome Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • app.usergems.com

    UserGems AI Copilot Chrome Extension sends data to app.usergems.com. No other extension we have analysed sends data here.

Updated 30 September 2026mfafgbnpmniemelmlmnekmcefkjoaope