InboxLean (“we,” “us,” or “our”) provides an AI inbox assistant that connects to Gmail and Microsoft Outlook / Microsoft 365. This policy explains what we collect, why, how long we keep it, and how you can delete it. Questions: support@inboxlean.com.
1. What we collect
- Account & waitlist: email address, optional provider preference, and basic account settings when you sign up.
- Mail access (after you connect): OAuth tokens and the mail metadata and content needed to unsubscribe, file messages, create reply drafts, and build your digest. We request the minimum scopes required for those features.
- Usage: product events (e.g., feature used, errors) to keep the service reliable. We do not sell this data.
- Payment: handled by our payment processor (Stripe). We do not store full card numbers.
2. How we use your data
We use your data only to provide and improve InboxLean for you: organizing mail, drafting replies in Drafts (never auto-sending), sending digests you asked for, customer support, security, and billing. We do not sell your email content or personal information. We do not use your email content to train general-purpose AI models.
3. Google user data — Limited Use disclosure
InboxLean’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Google user data is used only to provide and improve user-facing features that are prominent in the InboxLean interface (inbox cleanup, filing, draft replies, digests).
- We do not transfer Google user data to third parties except as necessary to provide/improve those features (e.g., infrastructure subprocessors under contract), to comply with law, or with your direction.
- We do not use Google user data for serving advertisements.
- We do not allow humans to read Google user data except with your affirmative agreement for specific messages, for security/compliance investigations, or where required by law — and then only when necessary and limited in scope.
- OAuth tokens are stored encrypted at rest. You can revoke access anytime in your Google Account permissions and/or by disconnecting in InboxLean.
4. Microsoft Graph / Outlook data
When you connect Microsoft Outlook or Microsoft 365, we access Microsoft Graph only with the permissions you grant, for the same product purposes listed above. Tokens are encrypted at rest. You can revoke access in your Microsoft account and/or disconnect in InboxLean. We do not sell Microsoft Graph data or use it to train general AI models.
5. Retention
We keep account and operational data while your account is active. Processed mail content and derived artifacts (e.g., draft text we generated) are retained only as long as needed to provide the feature, then deleted or anonymized on a rolling basis. Waitlist emails are kept until you ask us to remove them or the waitlist closes into an account. Backups age out on a short cycle.
6. Deletion
You may request deletion of your account and associated personal data at any time via Delete my data or by emailing support@inboxlean.com. We will delete or anonymize personal data within a reasonable period (typically within 30 days), except where we must retain limited records for legal, security, or accounting reasons. Disconnecting Google or Microsoft stops future access; use the deletion form for a full wipe.
7. Sharing & subprocessors
We use vetted infrastructure and service providers (hosting, email delivery, payments, error monitoring) under contracts that require appropriate security and limit use of your data to providing their services to us. We do not sell personal information.
8. Security
See our Security page for encryption, access control, and review practices. No method of transmission or storage is 100% secure; we work to protect your data with industry-standard measures.
9. Children
InboxLean is for business and professional use and is not directed at children under 16. We do not knowingly collect data from children.
10. Changes
We may update this policy. We will post the new date above and, for material changes, notify account holders by email when practical.
11. Contact
InboxLean · support@inboxlean.com