Privacy Policy

1. What Personal Inbox does

Personal Inbox helps the account owner search and read email, summarize inbox activity, manage labels, review and create drafts, preview attachments, archive messages, and send a draft after explicit confirmation. It also supports rules-based sorting on the owner's computer.

2. Google user data the application accesses

Personal Inbox requests the Google OAuth scope gmail.modify. Depending on the feature the owner chooses, the application may access:

• Gmail messages, threads, headers, sender and recipient information, subject lines, message bodies, snippets, labels, and attachment metadata;
• Gmail drafts and the information needed to create, update, delete, or send a selected draft;
• Attachments selected for local preview or export; and
• Mailbox identifiers needed to apply labels, archive messages, and reverse supported changes.

The application does not request access to Google Drive, Google Calendar, contacts, passwords, or unrelated Google Account data.

3. How Google user data is used

Google user data is used only to provide the Personal Inbox features described above, maintain the owner's mailbox organization, complete actions the owner requests, and preserve limited records needed to review or undo supported changes.

Personal Inbox does not use Google user data for advertising, sale, credit decisions, surveillance, building profiles about other people, or training generalized artificial-intelligence or machine-learning models. Its use of information received from Google APIs is limited to providing or improving the user-facing features of Personal Inbox.

4. Where data is processed and stored

The Gmail authorization credentials and tokens used by Personal Inbox are stored on the owner's Windows computer, outside shared Dropbox folders. The application performs its mailbox operations on that computer. When the owner requests help in a Claude conversation, the Gmail data needed for that request is also processed by Anthropic's Claude service.

Operational logs record counts, tool names, results, and decisions. They are designed not to record message bodies, subjects, senders, recipients, or search queries. Local action records may retain Gmail identifiers and label names so supported changes can be reviewed or reversed. Local work plans may temporarily retain subject lines, snippets, identifiers, and sorting decisions when needed for the requested workflow.

Attachment previews are stored locally and cleared after seven days. An attachment is copied into Dropbox only when the owner explicitly requests and confirms that export.

5. When data is shared

Personal Inbox does not sell Google user data. Data is shared only as needed to provide a feature selected by the owner, comply with law, or protect the application's security.

• Google: Gmail data is retrieved from and changes are returned to Google's Gmail API.
• Claude by Anthropic: When Personal Inbox is used in a Claude conversation, the Gmail data needed for that request is provided to Claude so the requested information or assistance can be shown in that conversation.
• Tailscale: The private connector uses Tailscale Funnel to route encrypted network traffic between Claude and the owner's computer.
• Dropbox: A Gmail attachment is exported to a Dropbox location only when the owner explicitly requests that action.

Third-party services process information under their own terms and privacy policies. Personal Inbox does not authorize those services to use Google user data for advertising on its behalf.

6. Retention and deletion

Gmail messages remain in the owner's Google account unless the owner changes them through Gmail, a confirmed Personal Inbox action, or sorting rules the owner has chosen. Personal Inbox does not permanently delete Gmail messages. Manual draft deletion, sending, and archiving require explicit confirmation in supported workflows. Scheduled rules may label and archive messages according to instructions set by the owner.

Local credentials, tokens, work plans, and action records are kept on the owner's computer until he removes them or they are replaced during normal operation. Attachment previews are cleared after seven days. The owner can disconnect the connector, delete local application data, or revoke Google access from his Google Account at any time. Revoking access stops future Gmail API access but does not change data already stored in Gmail or files the owner previously exported.

7. Security and user control

The connector runs on the owner's computer and can be switched off locally. New connections are disabled by default and require a short approval window plus a matching code confirmed on the computer. Connector tokens are stored in hashed form, access tokens expire, refresh tokens rotate, and sensitive actions require a separate confirmation tied to the exact action reviewed.

No system can guarantee absolute security. Personal Inbox limits access to the account owner and the tools he authorizes, and it restricts the data recorded in its operational logs.

8. Website analytics

This website does not ask visitors to create an account or submit personal information through a web form. If someone contacts Dr. Dell Gines by email, that information is used to respond to the inquiry and provide the requested communication.

This website is hosted by Tiiny Host. Tiiny Host adds cookieless analytics to hosted pages. According to Tiiny Host, this analytics service does not use cookies or collect personal data. Personal Inbox does not combine website analytics with Gmail data.

9. Google API Services User Data Policy

Personal Inbox's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

10. Changes to this policy

This policy may be updated when Personal Inbox's features, data practices, or service providers change. The effective date at the top of this page identifies the current version.