1. Overview
This policy describes how Inboxes handles information when you use the Service. We keep it straightforward: we connect to your Mailgun account and provide a webmail experience on top of it. Related documents: Terms of Service and Refund Policy.
2. What We Collect
- Account information you provide (name, email, password).
- Your Mailgun API key, which we store encrypted.
- Email data accessed through the Mailgun API on your behalf. We cache and index messages locally to provide features like threading, search, and delivery history.
- Basic server logs for operational purposes.
- Payment information is handled by Paddle. We do not store card details.
3. How We Use Your Information
We use your information to operate the Service — displaying your emails, sending email through Mailgun on your behalf, managing your account, verifying domains/webhooks, and processing payments.
4. Third Parties
We may share information with third-party services as necessary to operate the Service. This currently includes Mailgun (email infrastructure), Paddle (payments), and object storage for attachments.
5. Data Storage and Security
We make reasonable, best-effort attempts to protect your data, including encrypting your API key at rest and using secure authentication. No system is perfectly secure and we cannot guarantee absolute security.
Sending and receiving depend on Mailgun. If you revoke your API key or delete related Mailgun resources, we lose access to transport new mail for those domains.
6. Data Retention
We retain your data for as long as your account is active. If you delete your account, we make reasonable efforts to remove your data from our systems. Some data may persist in backups or logs for a limited period.
7. Your Choices
- You can delete your account at any time.
- You can revoke your Mailgun API key at any time to cut off API access.
- You can disconnect providers and remove mailboxes from Settings.
8. Cookies
We use cookies for authentication (access and refresh tokens) and to keep you signed in across the marketing site and the webmail app when configured on a shared cookie domain.
9. Children
The Service is not intended for anyone under 18.
10. Changes
We may update this policy at any time. Continued use of the Service after changes constitutes acceptance.
11. Contact
Questions? Email support@inboxes.pro or visit Contact.