Privacy Policy

Last Updated: March 4, 2025

Welcome to InboxBoard. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

1.1 Account Information

When you register for an account, we collect:

• Username
• Email address
• Password (stored securely using industry-standard hashing)
• Account type and subscription information

1.2 Email Account Data

To provide our services, we access and process:

• Email messages and metadata (subject, sender, recipient, date)
• Email attachments (when you choose to view or download them)
• Calendar events (when you connect Google Calendar or Microsoft Calendar)

Important: We only access emails that you explicitly authorize us to access through OAuth authentication. We do not access your emails without your explicit permission.

1.3 Usage Data

We automatically collect certain information when you use our service:

• IP address and browser type
• Device information
• Pages visited and features used
• Time and date of access

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and manage your account
• Display your emails in board and list views
• Send you important updates about your account and our services
• Respond to your inquiries and provide customer support
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. Data Storage and Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed using secure algorithms (bcrypt)
• OAuth tokens are encrypted and stored securely
• Data transmission is encrypted using HTTPS/TLS
• Regular security audits and updates

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

4. Third-Party Services

We integrate with the following third-party services:

• Google: Gmail API and Google Calendar API for email and calendar access
• Microsoft: Microsoft Graph API for Outlook email and calendar access
• Stripe: Payment processing for subscriptions (if applicable)

These services have their own privacy policies. We encourage you to review their privacy policies to understand how they handle your data.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our service (e.g., hosting, payment processing)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal data
• Correction: Update or correct your account information through the Settings page
• Deletion: Request deletion of your account and associated data
• Data Export: Export your preferences and data (available in Settings)
• Revoke Access: Disconnect linked email accounts at any time

To exercise these rights, please contact us at support@inboxboard.com or use the account deletion feature in Settings.

7. Cookies and Tracking

We use session cookies to maintain your login state and preferences. These cookies are essential for the service to function properly. We do not use tracking cookies for advertising purposes.

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our service, you consent to the transfer of your information to these countries.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: