Data we access
When you connect Google, we receive your account identifier, email address and profile details. Gmail permissions let Inbox Cero access message headers, senders and recipients, message contents, attachments, threads, drafts, labels and supported mailbox settings. We store the OAuth credentials needed to maintain your connection.
The service also processes the settings and rules you create, the drafts and scheduled sends you save, and the prompts and chat history you provide when using the assistant. Hosting providers process request metadata such as IP addresses and timestamps to deliver and protect the service.
How we use it
We use Google data to sign you in, display and search your mailbox, keep it in sync, and carry out actions you request or enable. Those actions can include labelling or archiving messages, saving drafts and sending mail through your connected account.
When a feature uses your configured OpenAI API connection, Inbox Cero sends the instructions and relevant message text or context to OpenAI to return a result, such as a summary, classification or draft. We use and transfer Google user data in accordance with the Limited Use requirements of the Google API Services User Data Policy. We do not sell Google user data, use it for advertising or use Google Workspace API data to develop, improve or train general-purpose AI models.
Storage and deletion
Google retains the original mailbox. Inbox Cero stores message metadata and related records in its mailbox index. It can also keep preloaded copies of recent message bodies for up to 30 days from receipt. Your browser can hold a local mailbox cache and a session cookie. The public information pages don’t require an account.
We use HTTPS, access controls and application encryption for stored OAuth credentials. We keep account records and saved work until you remove the mailbox or ask us to delete them. Temporary caches expire according to their purpose. Backups and operational logs may retain copies after live records are deleted.
Your choices
Remove your mailbox in Inbox Cero’s Accounts settings to delete the live records associated with it. You can also remove Inbox Cero’s access in your Google Account to stop future Gmail access. Revoking access does not delete copies already held by Inbox Cero. You can clear locally cached data in your browser’s site settings.
To ask about access, correction or deletion, or to contact us about this policy, use the Designful contact form and mention Inbox Cero. We’ll update this policy if our data practices change and notify users when a change affects how we use their Google data.