Privacy Policy

Effective Date: August 01, 2025

1. Introduction

Inbox Detox application (the “Service”) is operated by Inbox Detox LLC, Sharjah Media City, Sharjah, United Arab Emirates, ("Inbox Detox," "we," "us," or "our"). Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. If you do not agree with any part of this Privacy Policy, please do not use the Service.

2. Information We Collect

Category	Details	Purpose
Account Information	Email address, name, profile picture ID obtained via API Sign‑In.	Authenticate you, personalize the dashboard, and communicate with you.
Mail Data (via API)	• Email metadata (sender, subject line, date, thread ID)
• Labels and message IDs
• Deletion status
We never store full email content.	Identify high‑volume senders, enable search, scheduling, and deletion features you configure.
OAuth Tokens	Secure, scoped, refresh & access tokens provided by Google, Apple, Microsoft or other mail providers. Stored only in encrypted form.	Maintain authorized access to your mail on your behalf.
User‑Defined Rules & Preferences	Username, deletion rules, selected senders/groups, scheduling options.	Execute automated or on‑demand clean‑up actions you request.
Usage & Device Data (non‑identifying)	Browser type, operating system, anonymized analytics events, referral URL, pages visited, timestamps.	Monitor performance, detect abuse, improve and personalize the Service.
Support Communications	Messages you send to support@inbox‑detox.com	Respond to your inquiries and provide customer support.

3. How We Use Information

We use your information to:

1. Operate, maintain, and secure the Service.
2. Authenticate your access via API Sign‑In.
3. Identify and visualize high‑volume e-mail senders.
4. Execute, schedule, or undo email deletions, per your settings.
5. Communicate with you about updates, security alerts, and support.
6. Analyze usage trends to improve and personalize features.
7. Detect, investigate, and prevent fraud, spam, or other illegal activities.
8. Enforce our Terms of Service and comply with legal obligations.

Inbox Detox LLC acts as the data controller under the UK GDPR, EU GDPR, and other applicable laws regarding personal data.

4. Lawful Bases for Processing (EEA/UK Users)

We rely on (a) your consent (Art. 6 (1)(a) GDPR) for e-mail access; (b) performance of a contract (Art. 6 (1)(b)) to provide the Service; and (c) legitimate interests (Art. 6 (1)(f)) for analytics, security, and product improvement, provided those interests are not overridden by your rights.

5. Sharing & Disclosure

We do not sell or rent your personal information. We share it only:

• Relevant Mail Provider (including but not limited to Apple, Google, Microsoft, Yahoo, others) – to authenticate you and access via API.
• Service Providers – e.g., cloud hosting (Hostinger), analytics, customer‑support tools—each bound by contractual confidentiality and security obligations.
• Legal & Safety – if required by law, subpoena, or to protect rights, property, or safety of Inbox Detox, users, or others.
• Business Transfers – in connection with a merger, acquisition, or sale of assets, with notice to you.
• With Your Consent – if you explicitly authorize additional sharing.

6. API Services User Data Policy – Limited Use

Inbox Detox’s use and transfer of information received from APIs adheres to the relevant Mail Provider API Services User Data Policy, including the Limited Use requirements. We only use relevant Mail Provider data to provide or improve core functionality that is obvious to the user, and we do not allow humans to read this data unless we have your affirmative consent, it is necessary for security purposes, or to comply with applicable laws. We comply with applicable developer policies from Apple, Google, Microsoft Outlook, Yahoo and others regarding email data access and user consent.

We do not access, read, store, or process the content or body of your emails. Inbox Detox interacts only with message metadata necessary to perform the actions explicitly requested by you.

7. Data Security

We employ reasonable administrative, technical, and physical safeguards, including:

• Encryption in transit (HTTPS/TLS 1.2+) and at rest (AES‑256 for tokens).
• Least‑privilege access controls and role‑based permissions.
• Regular vulnerability scans and third‑party penetration testing. No method of transmission or storage is 100 % secure; therefore, we cannot guarantee absolute security.

8. Data Retention

• We retain OAuth tokens, rules, and minimal metadata only while your account remains active or as needed to provide the Service.
• Usage analytics are retained for up to 24 months in aggregated form.
• We may keep records as necessary to comply with legal obligations, resolve disputes, and enforce agreements.
• When you delete your account or revoke relevant Mail Provider access, associated data is deleted or anonymized within 30 days, except where retention is required by law.

9. Your Choices & Rights

• Review / Update Information: Update your Mail Provider profile via your Account.
• Delete Inbox Detox Account & Data: Email a request to support@inbox‑detox.com from your registered address.
• GDPR / CCPA Rights: Subject to local law, you may have rights to access, portability, erasure, restriction, objection, or opt out of “sale”/“sharing” of personal data. Contact us to exercise these rights.

10. Children’s Privacy

The Service is not intended for children under 13 years of age (or the minimum age in your jurisdiction). We do not knowingly collect data from children. If we learn we have collected such data, we will delete it promptly.

We also comply with applicable U.S. privacy regulations, including the California Consumer Privacy Act (CCPA), where relevant.

11. International Transfers

We are based in the United Arab Emirates. If you access the Service from outside the United Arab Emirates, your information may be transferred to, stored, or processed in the United Arab Emirates. We rely on standard contractual clauses or equivalent safeguards where required.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will post the revised version on this page and update the "Effective Date." Material changes will be announced via the Service. Continued use after posting constitutes acceptance of the changes.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Email: support@inbox‑detox.com
Mail: Inbox Detox LLC, Sharjah Media City, Sharjah, United Arab Emirates