Privacy Policy
At InboxPilot, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines our practices regarding the collection, use, and protection of your data when you interact with our platform.
We recognize that information privacy is an ongoing responsibility, and we will update this policy as we adopt new practices or technologies.
InboxPilot uses Gmail OAuth to access your Gmail account with the necessary permissions to send and read emails. Here is how we handle your Gmail data:
- Email access: We use Gmail OAuth solely to generate AI responses. We do not store your emails on our servers.
- Data storage: The only data we store is the AI-generated response that is sent out, along with message IDs and thread IDs — for logging purposes only.
- Data security: All data interactions with Gmail are encrypted and handled securely using industry-standard practices.
- No email storage: We do not store, read, or analyze your emails beyond what is necessary to generate a response.
- User control: You can revoke InboxPilot's access to your Gmail account at any time through your Google account settings.
InboxPilot does not retain or use data obtained through Google Workspace APIs to develop, improve, or train generalized AI or ML models. Our data usage is strictly limited to:
- Providing personalized service to individual users
- Generating AI responses within the specific user's context
- Maintaining necessary operational logs
We do not aggregate, store, or leverage user data for creating or enhancing generalized AI or machine learning models beyond the specific user's individual experience.
InboxPilot uses AI services, including services provided by OpenAI, LLC, to power our email drafting and automation features. When we use third-party AI services:
- No training on your data: We configure third-party AI services to NOT retain or use your personal data, email content, or customer information for training their AI models.
- Data minimization: We only send the minimum necessary data to AI services required to provide the requested functionality.
- Contractual protections: We have agreements in place with AI providers that prohibit them from using your data for training or model improvement.
- Temporary processing: Data sent to AI services is processed temporarily and not stored by the AI provider for training purposes.
Your personal data, email content, and customer information are never shared with third-party AI providers for model training, improvement, or analytics purposes.
InboxPilot collects and processes only the minimum necessary information to provide our AI-driven services.
Information we collect:
- Email address
- First and last name
- Profile picture / avatar
- Message IDs and thread IDs
- Outgoing AI-generated email responses
We explicitly do not
- Store email attachments
- Store contact lists
- Use your data for advertising
- Sell your data to third parties
- Share data with information resellers
- Use data for credit assessment or lending purposes
- Create external databases from your data
As with most websites, InboxPilot automatically collects and stores certain information in log files. This may include IP addresses, browser type, operating system, and usage information. We use this information to improve our site and diagnose server issues.
InboxPilot uses cookies and similar tracking technologies to improve your experience on our website. You can manage cookie preferences through your browser settings. For more information, please refer to our Cookie Notice.
We implement robust security measures to protect your data:
- Encryption of all data in transit and at rest
- Secure cloud infrastructure with industry-standard protections
- Regular security audits and updates
- Access controls and authentication mechanisms
- Monitoring systems for unauthorized access attempts
We maintain clear data retention practices:
- Outgoing AI-generated emails are retained for quality assurance
- Message IDs and thread IDs are retained for service functionality
- Account information is retained while your account is active
You may request deletion of your data by contacting our Privacy Team at support@inboxpilot.co, using the deletion tools in your account settings, or revoking access through your Google account settings.
We work with trusted third-party service providers (sub-processors) to deliver our services. These sub-processors are contractually bound to protect your data and use it only for the specific purposes we have authorized.
We only share information when you request or authorize it, when it is required to provide our service, when required to comply with the law, or when necessary for security purposes.
We use the following sub-processors to provide our services:
provider
purpose
location
Amazon Web Services, Inc.
Cloud hosting and infrastructure
USA
Google LLC
Gmail / Outlook OAuth authentication
USA
OpenAI, LLC
AI services for email drafting and automation
USA
Stripe, Inc.
Payment processing
USA
Zendesk, Inc.
Customer support ticketing (optional)
USA
All sub-processors are bound by strict data protection agreements that require them to process your data only for authorized services, implement appropriate security measures, not use your data for their own purposes or AI training, and comply with applicable data protection laws.
Information we collect about you will be processed in the United States. By using InboxPilot's services, you acknowledge that your personal information will be processed in the United States. We implement robust data protection mechanisms including industry-standard encryption at rest and in transit, and strict access controls to ensure only authorized personnel can access sensitive data.
You have the following rights concerning the information we hold:
- Right to access: Request access to the information we have on record
- Right to rectification: Request corrections to any inaccurate information
- Right to erasure: Request the removal of your information from our records
- Right to control: Manage your data sharing preferences and revoke access
We do not knowingly attempt to solicit or receive information from children.
If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact us:
InboxPilot
2810 N Church St PMB 16104
Wilmington, Delaware 19802-4447
Thank you for choosing InboxPilot. We are committed to ensuring your privacy and providing a secure platform.


