Privacy Policy

Last updated: June 2026

Inbox Velocity is currently in a pre-launch, invite-only private beta. This policy describes how the product handles data today and how the marketing site (this website) handles the information you give us. We'll update it as the product matures.

1. Information we collect

• Waitlist signups (this site): the email address you submit, plus basic context such as the referring page and any UTM campaign parameters. We use this only to contact you about early access and product updates.
• Beta product: when you connect a Gmail account, we access your email via Google OAuth in order to classify, prioritize, file, and (when you choose) help you compose messages.

2. How Gmail access works

• We authenticate with Google OAuth. We never see or store your Google password.
• The OAuth access/refresh tokens we store are encrypted at rest (AES-256).
• You can revoke Inbox Velocity's access at any time from your Google account permissions.
• We request only the Gmail scopes needed to provide the service.

3. AI processing

To classify and organize your email, message content is sent to OpenAI's API. Per OpenAI's API data-usage policy, content submitted through the API is not used to train their models. We do not sell your data, and we do not use your email content to train models of our own beyond improving your personal filing suggestions within your own account.

4. Security

• Authentication is via Google OAuth — no passwords are stored.
• OAuth tokens are encrypted at rest with AES-256.
• Access is scoped and revocable at any time.
• We are an early-stage product actively hardening our security practices and working toward formal compliance certifications as we grow. We don't yet claim SOC 2 or similar certifications.

5. Your choices

• Ask us to remove you from the waitlist or delete your data at any time.
• Revoke Gmail access from your Google account.

6. Contact

Questions or requests? Email [email protected].