Inboxed ("we," "us," or "our") is a web-based email personalization tool that allows users to send personalized emails through their own Gmail account using data from a Google Sheet. This Privacy Policy describes what information we collect, how we use it, and your rights regarding that information.
By using Inboxed at app.getinboxed.app, you agree to the terms of this Privacy Policy.
1. Information We Collect
1.1 Information You Provide
When you sign in to Inboxed using your Google account, we receive:
Your name and email address from your Google profile
An OAuth access token and refresh token that allows Inboxed to act on your behalf
1.2 Information We Access on Your Behalf
To provide the core functionality of the service, Inboxed accesses the following Google data with your explicit permission:
Google Sheets: We read the contents of Google Sheets URLs you provide in order to load recipient data and merge fields. We also write back to sheets (e.g., to mark rows as sent) when a "Sent" or "Sent At" column is present.
Gmail: We send emails on your behalf using the Gmail API. Emails are sent from your actual Gmail account, using your OAuth credentials. We do not store the content of emails you send beyond the subject line and recipient address in your send history.
1.3 Usage Data
We automatically collect limited usage data including:
The number of emails sent per session
Timestamps of send activity
Basic error logs for debugging purposes
2. How We Use Your Information
We use the information we collect solely to:
Authenticate you and maintain your session
Read your Google Sheet data to populate recipient lists and merge fields
Send emails through Gmail on your behalf
Record your send history for your reference in the application
Improve the reliability and performance of the service
We do not use your data for advertising, and we do not sell or share your personal information with third parties for their own marketing purposes.
3. Data Storage and Retention
Inboxed stores the following data in our secure database:
Your Google account email address and name
OAuth tokens (encrypted) necessary to maintain your authenticated session
A log of emails sent, including recipient email address, subject line, and timestamp
Subscription status, if applicable
We do not store the body content of emails you compose or send. We do not store the full contents of your Google Sheets beyond what is loaded in your active session.
You may request deletion of your account and associated data at any time by contacting us at the address below.
4. Google API Services
Inboxed's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
We only access Google data that is necessary to provide the features you explicitly use
We do not transfer your Google data to third parties except as necessary to provide the service
We do not use Google data for advertising purposes
We do not allow humans to read your Google data except with your explicit permission or as required by law
5. Data Security
We take reasonable measures to protect your information, including:
OAuth tokens are stored securely in an encrypted database
All data is transmitted over HTTPS
Access to production systems is restricted to authorized personnel only
No method of transmission or storage is 100% secure. We cannot guarantee the absolute security of your data.
6. Third-Party Services
Inboxed uses the following third-party services to operate:
Google (authentication, Gmail API, Google Sheets API) — governed by Google's Privacy Policy
Railway (cloud hosting and database) — governed by Railway's Privacy Policy
Lemon Squeezy (billing and payments) — governed by Lemon Squeezy's Privacy Policy
We are not responsible for the privacy practices of these third-party providers.
To exercise any of these rights, please contact us at the address below.
8. Children's Privacy
Inboxed is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of Inboxed after changes are posted constitutes your acceptance of the updated policy.
10. Contact Us
If you have any questions about this Privacy Policy or your data, please contact us: