Privacy Policy

Last updated: June 29, 2026

At InboxOS, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered email intelligence service.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Email address, display name, and password when you register
  • Payment Information: Processed securely by Waffo Pancake (our Merchant of Record). We never store your credit card details.
  • Connected Email Data: When you connect your email account, we access email metadata (sender, subject, timestamps) and content for AI processing
  • Communications: Any messages you send to our support team

1.2 Information Collected Automatically

  • Usage Data: Features used, emails processed, timestamps
  • Device Information: Browser type, operating system, device identifiers
  • Log Data: IP addresses, access times, pages viewed

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve InboxOS services
  • Process transactions and send related information
  • Send you technical notices, updates, security alerts
  • Respond to your comments, questions, and customer service requests
  • Analyze usage patterns to improve user experience
  • Detect, prevent, and address fraud and security issues
  • Provide AI-powered features (priority classification, draft generation)

3. Email Data Handling

Your email data is the core of our service. We handle it with extreme care:

  • Encryption: All email data is encrypted at rest and in transit using industry-standard AES-256 encryption
  • AI Processing: Email content is processed by our DeepSeek AI to provide priority classification and draft generation
  • No Third-Party Sharing: We never sell, share, or provide your email content to third parties
  • Data Retention: Emails are retained for 90 days, after which they are permanently deleted
  • User Control: You can disconnect your mailbox at any time, which immediately stops future sync and deletes synced data within 30 days

4. Data Sharing

We do NOT sell your personal data or email content. We share information only in these limited circumstances:

  • Service Providers: With vendors who assist in operating InboxOS (hosting, AI processing via DeepSeek API)
  • Payment Processing: With Waffo Pancake (our Merchant of Record) for secure payment processing; legacy subscriptions are processed by Creem
  • Legal Requirements: When required by law, court order, or to protect our rights

5. Data Security

We implement industry-standard security measures including:

  • Encryption of data in transit (TLS 1.3)
  • Encryption of data at rest (AES-256)
  • Regular security audits and penetration testing
  • Access controls and authentication requirements
  • Secure coding practices

6. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Export: Download your data in a portable format
  • Delete: Request deletion of your account and data
  • Correct: Update inaccurate personal data
  • Object: Opt out of certain data processing

7. Cookies

We use essential cookies for authentication and session management. These are necessary for the service to function properly. We do not use advertising or tracking cookies.

8. Children's Privacy

InboxOS is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

For questions about this Privacy Policy, contact us at:

support@inboxos.com