Inbox Detox Privacy Policy

1. Introduction

Inbox Detox.com (the “Service”) is operated by Inventa Operations LLC, 24 SE 2nd Ave, Ste 550, Miami, FL 33131, USA ("Inbox Detox," "we," "us," or "our"). Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. If you do not agree with any part of this Privacy Policy, please do not use the Service.

2. Information We Collect

3. How We Use Information

We use your information to:

1. Operate, maintain, and secure the Service.
2. Authenticate your access via Google Sign In.
3. Identify and visualize high volume Gmail senders.
4. Execute, schedule, or undo email deletions, per your settings.
5. Communicate with you about updates, security alerts, and support.
6. Analyze usage trends to improve and personalize features.
7. Detect, investigate, and prevent fraud, spam, or other illegal activities.
8. Enforce our Terms of Service and comply with legal obligations.

4. Lawful Bases for Processing (EEA/UK Users)

We rely on (a) your consent (Art. 6 (1)(a) GDPR) for Gmail access; (b) performance of a contract (Art. 6 (1)(b)) to provide the Service; and (c) legitimate interests (Art. 6 (1)(f)) for analytics, security, and product improvement, provided those interests are not overridden by your rights.

5. Sharing & Disclosure

We do not sell or rent your personal information. We share it only:

• Google LLC – to authenticate you and access Gmail via the Google API.
• Service Providers – e.g., cloud hosting (Hostinger), analytics, customer support tools—each bound by contractual confidentiality and security obligations.
• Legal & Safety – if required by law, subpoena, or to protect rights, property, or safety of Inbox Detox, users, or others.
• Business Transfers – in connection with a merger, acquisition, or sale of assets, with notice to you.
• With Your Consent – if you explicitly authorize additional sharing.

6. Google API Services User Data Policy – Limited Use

Inbox Detox’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Gmail data to provide or improve core functionality that is obvious to the user, and we do not allow humans to read this data unless we have your affirmative consent, it is necessary for security purposes, or to comply with applicable laws.

7. Data Security

We employ reasonable administrative, technical, and physical safeguards, including:

• Encryption in transit (HTTPS/TLS 1.2+) and at rest (AES 256 for tokens).
• Least privilege access controls and role based permissions.
• Regular vulnerability scans and third party penetration testing.

No method of transmission or storage is 100 % secure; therefore, we cannot guarantee absolute security.

8. Data Retention

• We retain OAuth tokens, rules, and minimal metadata only while your account remains active or as needed to provide the Service.
• Usage analytics are retained for up to 24 months in aggregated form.
• We may keep records as necessary to comply with legal obligations, resolve disputes, and enforce agreements.
• When you delete your account or revoke Google access, associated data is deleted or anonymized within 30 days, except where retention is required by law.

9. Your Choices & Rights

• Review / Update Information: Update your Google profile via your Google Account.
• Revoke Gmail Access: At any time at https://myaccount.google.com/permissions.
• Delete Inbox Detox Account & Data: Email a request to support@inbox detox.com from your registered address.
• GDPR / CCPA Rights: Subject to local law, you may have rights to access, portability, erasure, restriction, objection, or opt out of “sale”/“sharing” of personal data. Contact us to exercise these rights.

10. Children’s Privacy

The Service is not intended for children under 13 years of age (or the minimum age in your jurisdiction). We do not knowingly collect data from children. If we learn we have collected such data, we will delete it promptly.

11. International Transfers

We are based in the United States. If you access the Service from outside the U.S., your information may be transferred to, stored, or processed in the U.S. We rely on standard contractual clauses or equivalent safeguards where required.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will post the revised version on this page and update the "Effective Date." Material changes will be announced via the Service. Continued use after posting constitutes acceptance of the changes.