InboxShaper Privacy Policy

Effective date: April 2026

InboxShaper is built as a privacy-first service. This Privacy Policy explains what Google user data is accessed, how it is used, how it is protected, and what control users have over their connection.

InboxShaper accesses limited Gmail user data only to provide inbox analysis and user-requested cleanup features. InboxShaper does not sell Gmail user data, does not use it for advertising, and does not use it to train AI models.

1. Google User Data Access

When you connect your Google account through Google OAuth, InboxShaper may access limited Gmail user data required to provide its core functionality.

InboxShaper may access the following Gmail user data:

• Email metadata such as sender information, subject lines, message labels, categories, and related inbox classification signals
• Message identifiers required to organize emails and perform user-requested actions
• Gmail account email address used to identify the connected user account

InboxShaper does not access, read, or store the full content of Gmail messages.

InboxShaper does not use Gmail user data for advertising, marketing profiling, resale, or any unrelated purpose.

2. How Gmail User Data Is Used

InboxShaper uses the data listed above only to provide the features of the product, including:

• Analyzing inbox structure and email volume
• Identifying sender groups and high-volume senders
• Detecting promotions and other cleanup opportunities
• Displaying inbox insights, statistics, and dashboard summaries
• Performing user-initiated actions such as moving emails to trash, archiving emails, or marking emails as read

All Gmail actions are explicitly initiated by the user. InboxShaper does not automatically delete, archive, or modify emails without user action.

3. Gmail Scope Justification

InboxShaper requests Gmail modification permission (gmail.modify) because users use the application to take direct action on emails from within the product.

This permission is used only for features such as:

• Moving selected emails to trash
• Archiving selected emails
• Marking selected emails as read

A more limited read-only scope is not sufficient for these user-requested cleanup features.

4. Email Content Handling

InboxShaper is designed as a metadata-first product. It does not permanently store, copy, or archive full email bodies or email content as part of normal operation.

InboxShaper primarily uses metadata such as sender, subject line, labels, categories, and message IDs to provide analysis and cleanup features.

5. Token Storage & Authentication

InboxShaper securely stores OAuth tokens, including access tokens and refresh tokens, required to maintain your Gmail connection and perform user-requested actions.

These tokens are encrypted and used only for authentication and for carrying out the actions explicitly requested by the user.

6. Data Retention

InboxShaper does not permanently store full email content.

Limited aggregated analytics data, such as sender counts, categories, inbox metrics, scan summaries, and cleanup-related statistics, may be stored temporarily to provide dashboard functionality.

7. Data Sharing and Third Parties

InboxShaper does not sell, share, or transfer Gmail user data to third parties except as necessary to operate the service through trusted infrastructure providers.

These service providers may include hosting, database, and cloud infrastructure vendors. They may process data only as needed to support InboxShaper’s functionality and are not permitted to use the data for unrelated purposes.

8. Security

InboxShaper uses industry-standard security practices, including encryption, secure authentication flows, restricted access controls, and secure token handling to protect user data.

9. User Control, Revocation, and Deletion

Users remain in control of their Gmail connection and may revoke access to InboxShaper at any time through their Google Account settings.

Users can also disconnect their account directly from the InboxShaper dashboard, which stops further Gmail access by the application unless the user reconnects.

10. Google API Services Disclosure

InboxShaper’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

InboxShaper does not use Google user data to develop, improve, or train generalized AI or machine learning models.

11. Contact

For questions please contact: support@inboxshaper.com