Privacy Policy

Last updated: June 11, 2026

InboxVac ("we", "us") helps you analyze and clean your Gmail inbox. This policy explains what we access, what we store, and what we never do.

Summary

InboxVac only accesses Gmail data to analyze and clean your inbox.
We do not sell your email data.
We do not use your email content for advertising.
Email contents are not stored on our servers.
Emails are moved to Trash only after your confirmation.

Information we access

With your explicit Google permission, we access:

Gmail (read) — to count and categorize your emails (unread, promotions, social, newsletters, large attachments). We read message headers (such as the sender) and metadata needed for counts and previews.
Gmail (modify) — to move the emails you select and confirm to your Gmail Trash. We do not permanently delete emails.

We also receive your basic Google profile (name, email, avatar) for sign-in.

Information we store

We store only aggregate numbers and job metadata in Google Firebase (Firestore), located in the United States: account info, scan result counts, an estimate of recoverable storage, and cleanup job metadata (categories, counts, timestamps).

Information we never store

Email bodies or contents
Full lists of your email subjects
Attachments
Personal or sensitive message content

Gmail access happens inside secure server functions. Your Gmail refresh token is stored in Google Secret Manager (encrypted, access-controlled), never in our database in plaintext. Short-lived access tokens are created in memory and never stored.

Google API Services Limited Use

InboxVac's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data retention & deletion

Aggregates are retained while your account is active.
You can disconnect Gmail at any time, which revokes our access and deletes your stored refresh token.
You can delete all your data in-app (Settings → Delete my data), which removes your records and revokes Gmail access.
You can also revoke access at myaccount.google.com/permissions.

Children

InboxVac is not directed to children under 13 (or the applicable age in your region).

Changes

We will update this policy as the product evolves and post the new date above.

Contact

Questions? Email roha4885@gmail.com.