Privacy Policy

1. Introduction

Inbox AI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email management service.

2. Information We Collect

2.1 Information You Provide

• Google account information (name, email address, profile picture)
• Account settings and preferences
• Custom classification rules you create
• Feedback and support communications

2.2 Information We Collect Automatically

• Email metadata (sender, subject, date, labels)
• Email content for classification purposes
• Usage data and analytics
• Device and browser information
• IP addresses and log data

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our email classification service
• Process and analyze your emails using AI
• Organize and prioritize your inbox
• Send you notifications about email activity
• Respond to your support requests
• Monitor and analyze usage patterns
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. AI Processing and Email Analysis

We use OpenAI's GPT models to classify your emails. When processing emails:

• Email content is sent to OpenAI for classification
• We only send necessary information (sender, subject, snippet)
• OpenAI does not use your data to train their models
• Processed data is not retained by OpenAI beyond the API call
• Classification results are stored in our secure database

5. Data Storage and Security

We implement industry-standard security measures to protect your data:

• OAuth refresh tokens are encrypted using Google Cloud KMS
• Data is stored in Google Cloud Firestore with appropriate access controls
• All communications use HTTPS encryption
• Access to data is limited to authorized personnel only
• Regular security audits and updates

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: OpenAI for email classification, Google Cloud for infrastructure
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Your Rights and Choices

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Revoke Gmail access permissions
• Export your data
• Opt-out of non-essential communications
• Delete your account at any time

8. Gmail API Disclosure

Inbox AI's use and transfer of information received from Gmail APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.

We only access your Gmail data to:

• Classify and organize emails
• Provide the core functionality of our service
• Generate statistics about your email usage

We do not use Gmail data for advertising or any purpose other than providing our email management service.

9. Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal purposes.

10. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18.

11. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction. We use Google Cloud Platform's US-based infrastructure.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Material changes will be communicated via email.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at: