Privacy Policy

Effective Date: August 15, 2026

1. Data We Collect

All Users (Trial & Subscribed)

  • Email address, name, profile picture (from Google sign-in)
  • Profile information you choose to add (title, company, interests)
  • Payment information (processed by Stripe, not stored by us)
  • Pay Link payment records and paid-message information, including the sender's name, email address, and message content

Gmail-Connected Users Only

  • Gmail API tokens used to provide Spam Management
  • Spam-label metadata: sender addresses, subject lines, timestamps, message identifiers, and authentication-result metadata

We do not access or store ordinary Gmail Inbox message content for Spam Management. Paid messages submitted through an inbux Pay Link are stored so they can be shown to the recipient in the product.

2. How We Use Your Data

  • Display your pay link page to visitors
  • Process payments from senders
  • If Gmail connected: identify Spam-folder senders, send Pay Links on your behalf when you manually send one or explicitly enable Auto-send, and manage filters that reflect your Allow/block choices
  • Send you service updates
  • Protect the service, troubleshoot issues, provide support, and measure aggregate product use

3. Gmail API Compliance

If you connect Gmail, our use complies with Google's Limited Use Requirements:

  • We access Spam-label metadata needed for Spam Management, not ordinary Gmail Inbox message content
  • We act on your behalf only through choices you make in the product, such as manually sending a Pay Link, enabling Auto-send, allowing a sender, or blocking a sender
  • We do not sell Gmail-derived data, use it for advertising, or use it to determine creditworthiness
  • We use Gmail-derived data only to provide or improve the Spam Management features you authorize, for security, to comply with law, or as otherwise permitted by Google's API Services User Data Policy
  • You can pause Auto-send, disconnect Gmail, or revoke access anytime through your Google Account settings

4. What We Share

We don't sell your data. We share information only as needed to operate the service, including with:

  • Google: For authentication and Gmail API (if connected)
  • Stripe: For payment processing
  • Railway and its managed infrastructure: To host the application and database
  • Google Analytics: To understand aggregate use of the public site and product
  • Authorities or advisers when necessary to protect rights and security or comply with law

5. Your Pay Link Page

  • Your email is never shown to visitors
  • Only information you choose to display is visible
  • You control everything through account settings

6. Data Retention

  • Trial users: Accounts that do not subscribe may be deleted seven days after trial expiry
  • Subscribed users: Data retained while account is active
  • Cancelled subscribers: Accounts may be deleted after the paid subscription period and 30-day reactivation grace period
  • Deleted accounts: We remove or anonymize account and service data through our deletion process, subject to limited retention for security, fraud prevention, disputes, accounting, backups, or legal obligations

7. Your Rights

  • Update your public profile information
  • Request account deletion
  • Pause Auto-send or disconnect Gmail anytime
  • Request access, correction, export, or deletion of personal information through our contact form

8. Security

We use encrypted storage, HTTPS, OAuth 2.0, and regular security audits to protect your data.

9. Contact

Privacy questions? Use our contact form.

We'll notify you of significant policy changes via email.