Privacy Policy

The controller of your personal data is the administrator of the inboxmanager.ai service. You can reach us about any privacy matter at support@inboxmanager.ai.

• Account data, which is your email address and a hash of your password. We never store your password in readable form.
• Signup source, which is the referring page and any campaign parameters (UTM tags) present in the link you used to reach us.
• Technical data, which is your IP address, browser type and the time of your requests, used for security and to keep the service running.
• Demo text, which is any email text you paste into the demo on our home page so that we can produce a result for you.
• Billing data, which is your plan, billing period and payment status. Card details are handled by our payment processor and are not stored by us.

When you connect Gmail or Outlook, InboxManager processes message metadata (sender, recipients, subject, dates, labels or folders, thread structure) and message content. We use them only to produce what you asked for: lane labels, thread summaries, reply drafts, follow-up reminders and your daily briefing. We also read messages you have sent to learn the tone of your drafts.

We connect through the official Google API and Microsoft Graph with OAuth. We request only the scopes needed to read messages, apply labels or move messages to folders, and create drafts. We do not ask for your mailbox password. You can revoke access at any time in your Google or Microsoft account settings or by disconnecting the mailbox in the app.

• To provide the service you signed up for, including triage, summaries, drafts, reminders and briefings. Under the GDPR the legal basis is the performance of our contract with you.
• To send you account emails such as signup codes, security notices and billing messages, also based on our contract with you.
• To keep the service secure, prevent abuse and fix errors, based on our legitimate interest in running a safe service.
• To understand which pages and campaigns bring people to us, using signup source data, based on our legitimate interest. We do this without advertising pixels.
• To meet legal obligations, for example keeping billing records for the period required by tax law.

If you live in a US state with a privacy law, such as California under the CCPA, this means in plain terms that we collect the categories listed above for the purposes listed here, we do not sell your personal information and we do not share it for cross-context behavioral advertising.

We share data only with service providers that help us run InboxManager, under contracts that limit their use of it to providing services to us.

• A hosting provider that runs our servers and databases.
• AI model providers that process message content to produce labels, summaries and drafts. They are bound by contract not to train their models on your data.
• An email delivery provider that sends account emails and daily briefings.
• A payment processor that handles subscriptions and card payments.

We may also disclose data when the law requires it, for example in response to a valid court order.

We do not sell your data and we do not share it with advertising networks. Your mail is never used to train AI models, whether ours or those of our providers.

• Mailbox data, such as summaries, drafts and the labels we created, is kept while the mailbox is connected and according to the data retention settings of your workspace.
• When you disconnect a mailbox, we stop processing it and delete the mail data we hold for it.
• Account data is kept while your account exists. When you delete your account or ask us to delete it, we delete it, except billing records we must keep by law.
• Demo text is kept only as long as needed to show your result and for a short period for abuse prevention.
• Technical logs are kept for a limited period for security purposes and then deleted.

To ask for deletion at any time, email support@inboxmanager.ai from the address of your account.

Our service providers may process data outside the country where you live, including in the United States and the European Union. When data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on safeguards such as the Standard Contractual Clauses approved by the European Commission.

Data is encrypted in transit and at rest. Access to production systems is limited to people who need it to run the service. OAuth tokens are stored encrypted. Read more on our email data privacy page. If you suspect a security problem, write to support@inboxmanager.ai.

We use only strictly necessary cookies: a session cookie that keeps you signed in, a security token that protects forms against cross-site request forgery, and cookies that remember your preferences. We do not use advertising pixels or tracking cookies, which is why the site shows no cookie banner.

InboxManager is a service for businesses and professionals. It is not intended for anyone under 16, and we do not knowingly collect data from them. If you believe a person under 16 has created an account, contact us and we will delete it.

Depending on where you live, you have the right to access your data, correct it, delete it, receive a copy in a portable format, restrict or object to certain processing, and withdraw consent where processing is based on consent. Residents of US states with privacy laws can also ask what categories of data we collect and opt out of any sale or sharing, which we do not do. We do not treat you differently for exercising your rights.

To use any of these rights, email support@inboxmanager.ai from the address of your account. We may ask you to confirm your identity before acting on the request. In the European Union you also have the right to lodge a complaint with your local data protection authority.

We may update this policy when the service or the law changes. We will post the new version on this page with a new date, and for significant changes we will also notify you by email before they take effect.