Privacy Policy

Inboxly ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered email and calendar workspace.

By using Inboxly, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our service.

2.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials provided through our sign-up flow (powered by Clerk).

2.2 Google Account Data

With your explicit consent, we access your Gmail messages and Google Calendar events via Google OAuth scopes. We only request the minimum permissions needed to provide the service:

• Read and send emails on your behalf
• Read and write calendar events

We do not sell, share, or use your Gmail or Calendar data to train AI models beyond your personal Inboxly experience.

2.3 Usage Data

We automatically collect information about how you interact with Inboxly, including feature usage, session duration, and error logs, to improve the service.

2.4 AI Interaction Data

Prompts you submit and AI-generated responses may be retained temporarily to maintain conversation context and improve response quality within your session.

• Provide, operate, and maintain the Inboxly service
• Process and fulfill your requests (email drafts, calendar events, summaries)
• Improve, personalize, and expand our features
• Communicate with you about updates, security alerts, and support
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We do not sell your personal data. We may share information with:

• Service Providers: Third-party vendors who help us operate the platform (e.g., cloud hosting, authentication, payment processing). These providers are contractually bound to protect your data.
• AI Providers: To power AI features, your prompts and relevant email context may be sent to Anthropic's Claude API under their enterprise data protection terms.
• Legal Requirements: We may disclose data when required by law or to protect the rights, property, or safety of Inboxly, our users, or the public.

We retain your account data for as long as your account is active. Google account access tokens are stored encrypted and can be revoked at any time from your Google account settings or within Inboxly. You may request deletion of your account and associated data at any time by contacting us.

We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict certain processing
• Data portability
• Withdraw consent at any time (for consent-based processing)

To exercise any of these rights, contact us at privacy@inboxly.ai.

Inboxly uses cookies and similar technologies to maintain your session, remember your preferences, and analyze usage patterns. You can control cookie settings through your browser, though disabling certain cookies may affect functionality.

Inboxly is not intended for users under the age of 13. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

We may update this Privacy Policy periodically. We will notify you of material changes by email or through a prominent notice in the application. Continued use of Inboxly after changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, please contact us at: