Introduction

Welcome to InboxLight ("we," "us," or "our"). Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our application and services (collectively, the "Service"). By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

a. Personal Information

Account Registration: When you create an account, we collect your first name, last name, and email address.

Authentication Credentials: To monitor your email accounts, we collect authentication tokens or credentials necessary to access your email services. For providers like Gmail, we use OAuth tokens and do not store your passwords.

Payment Information: If you subscribe to a paid plan, our third-party payment processors collect billing details such as credit card numbers and billing addresses. We do not store this information on our servers.

b. Email Data

Email Metadata: Information such as sender and recipient email addresses, subject lines, timestamps, and attachment names.

Email Content: With your permission, we access the body of your emails to provide services like AI-generated summaries and smart filtering.

Attachments: Depending on your plan, we may store attachments associated with your emails.

Google Permissions and User Data: When you connect your Google account, we request specific permissions to access your Gmail data. InboxLight integrates with Google services to access your Gmail account for delivering features like email summarization and filtering. We access only the data necessary to provide these features and use OAuth for secure authentication. We only request the minimum necessary permissions and do not use your data for purposes beyond those outlined in this policy. We do not share or sell Google user data with third parties and adhere to Google's policies.

Microsoft Permissions and User Data: When you connect your Microsoft account, we request specific permissions to access your Email data. InboxLight integrates with Microsoft services to access your Email account for delivering features like email summarization and filtering. We access only the data necessary to provide these features and use OAuth for secure authentication. We only request the minimum necessary permissions and do not use your data for purposes beyond those outlined in this policy. We do not share or sell Microsoft user data with third parties and adhere to Microsoft's policies.

Yahoo Permissions and User Data: When you connect your Yahoo account, we request specific permissions to access your user data. InboxLight integrates with Yahoo services to access your user account for sign up and sign in only. We access only the data necessary to use OAuth for secure authentication. We only request the minimum necessary permissions and do not use your data for purposes beyond those outlined in this policy. We do not share or sell Yahoo user data with third parties and adhere to Yahoo's policies.

c. Usage Data

Device Information: We may collect information about the device you use to access the Service, including IP address, browser type, and operating system.

Cookies and Similar Technologies: We use cookies to enhance your experience, track usage, and improve the Service.

2. How We Use Your Information

Provide and Maintain the Service: To deliver the features and functionalities of InboxLight.

Personalization: To customize your experience and suggest filters or actions based on your email usage.

Communication: To send administrative information, updates, security alerts, and support messages.

Marketing: To send promotional materials and offers (you can opt-out at any time).

Analytics: To monitor and analyze usage and trends to improve the Service.

Security: To detect, prevent, and address technical issues and unauthorized activities.

Legal Compliance: To comply with legal obligations and protect our rights.

3. Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:

Service Providers: We use third-party vendors for secure hosting, customer support, and analytics. These providers may have access to your information only to perform services on our behalf and are obligated to protect it in accordance with applicable laws and this Privacy Policy.

Legal Requirements: If required by law, or to respond to legal processes.

Business Transfers: In connection with a merger, sale, or asset transfer.

Consent: With your consent or at your direction.

4. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information. However, no method of transmission over the internet or electronic storage is 100% secure.

Compliance With Google's Limited Use Policy: We comply with Google’s Limited Use policy, which means we only use Google user data to provide our app’s core functionality. We do not use this data for advertising or other non-specified purposes. All data is handled securely and used in accordance with Google's policies.

Google Workspace APIs and AI/ML Models: InboxLight does not use data obtained through Google Workspace APIs to develop, improve, or train generalized artificial intelligence or machine learning models. All data is accessed solely to provide the functionalities described in this Privacy Policy.

Compliance With Microsoft's Limited Use Policy: We comply with Microsoft's Limited Use policy, which means we only use Microsoft user data to provide our app’s core functionality. We do not use this data for advertising or other non-specified purposes. All data is handled securely and used in accordance with Microsoft's policies.

Compliance With Yahoo's Limited Use Policy: We comply with Yahoo's Limited Use policy, which means we only use Yahoo user data to provide our app’s core functionality. We do not use this data for advertising or other non-specified purposes. All data is handled securely and used in accordance with Yahoo's policies.

5. Your Choices and Rights

Access and Update: You can access and update your personal information through your account settings.

Opt-Out of Communications: You may opt out of receiving promotional emails by following the unsubscribe instructions.

Data Deletion: You can request the deletion of your personal data. Note that we may retain certain information as required by law.

Manage Google Data: You can manage permissions and revoke access to your Google data through the Google Account Permissions page. For more information, visit Google's Account Permissions page.

Manage Microsoft Data: You can manage permissions and revoke access to your Microsoft data through the Microsoft Account Permissions page. For more information, visit Microsoft's Account Permissions page.

Manage Yahoo Data: You can manage permissions and revoke access to your Yahoo data through the Yahoo Account Permissions page. For more information, visit Yahoo's Account Permissions page.

Revoking Access to Google Data: You may revoke InboxLight's access to your Google account at any time through your Google Account settings. Upon revocation, we immediately delete all related Google user data from our servers, except for metadata required to comply with legal obligations or security audits.

Revoking Access to Microsoft Data: You may revoke InboxLight's access to your Microsoft account at any time through your Microsoft Account settings. Upon revocation, we immediately delete all related Microsoft user data from our servers, except for metadata required to comply with legal obligations or security audits.

Revoking Access to Yahoo Data: You may revoke InboxLight's access to your Yahoo account at any time through your Yahoo Account settings. Upon revocation, we immediately delete all related Yahoo user data from our servers, except for metadata required to comply with legal obligations or security audits.

Cookies: You can control the use of cookies at the browser level.

6. Third-Party Services

Our Service may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their privacy policies independently.

7. Children's Privacy

InboxLight is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or governmental jurisdiction. By using the Service, you consent to such transfers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically.