Privacy Policy.

The left column is the formal legal policy. The right column is what it actually means — including proof you can verify in the code.

Last updated: May 2026

Formal policy

What this means + proof

1. Information we collect

Account data: When you register, we collect your name, email address, and authentication credentials via Google or Microsoft OAuth.

Usage data: We record verdict counts per filter run (junk, review, or legitimate), timestamps, and your account settings.

Email content: We do not collect, store, or retain email content. Email text is transmitted transiently to Anthropic's API for scoring and is not retained by us at any point.

Payment data: Billing is handled entirely by Stripe. We do not store payment card information.

No email content is stored in the database.

The database records only three things per filtered email: your user ID, a timestamp, and the verdict — junk, review, or legitimate. That is the entire record. No subject line, sender address, body text, or anything else. There is nothing to read back even if we wanted to.

Verify in our code →

2. How we use your information

We use collected information solely to:

— Provide and operate the email filtering service
— Authenticate your identity and maintain your account
— Process subscription payments via Stripe
— Send transactional emails via Resend
— Monitor service performance and diagnose issues

We do not use your data for advertising, profiling, or sale to third parties.

We don't sell it, advertise with it, or share it.

Your data is used for one thing: running the filter. We are not an advertising business. We make money from subscriptions, not from your data. There is no business model that benefits from doing anything else with it.

3. Email content and third-party processing

To score each email, the sender, subject, and up to 1,500 characters of the body are transmitted to Anthropic's Claude API. This transmission is transient — we do not retain a copy at any point.

Anthropic retains API request data for up to 7 days for abuse monitoring, after which it is permanently deleted. Anthropic's terms explicitly prohibit using API request data for model training.

By using Inbox Filter you consent to this transient processing by Anthropic under their privacy policy.

Email content is never sent to us — only to Anthropic's API, which scores it and discards it.

When an email is scored, the text goes directly from your Gmail or Outlook account to Anthropic's API. Our server receives only the score — a number between 0 and 100. We act as a relay, not a reader.

Anthropic retains request data for 7 days for abuse monitoring, then deletes it permanently. It is never used for model training. Think of it like spellcheck — the system checks the words but keeps no catalogue of your content.

Verify in our code →
Anthropic's privacy policy →

4. Data storage and retention

Account data is stored in a PostgreSQL database hosted on Railway (US region). We retain account data for as long as your account is active.

Filter log records (verdict counts and timestamps only) are retained to power your dashboard statistics.

You may disconnect your inbox or delete your account at any time from the Settings page. Upon account deletion, all personal data is removed within 30 days.

You can leave whenever you want and take nothing with you.

Your account data — name, email address, settings — lives in a database in the US. The only long-term records are verdict counts (how many emails got filtered) and their timestamps. Not what the emails were, just how many.

Disconnect your inbox or delete your account from Settings at any time. When you delete, everything goes within 30 days.

5. Third-party services

Inbox Filter uses the following third-party services:

Google / Gmail API — OAuth and inbox access
Microsoft / Outlook API — OAuth and inbox access
Anthropic Claude API — Email scoring
Stripe — Payment processing
Railway — Cloud hosting and database
Resend — Transactional email delivery

Each operates under their own privacy policy.

If you don't believe us, you can read the code.

The parts of our codebase that handle your email data — what gets sent to Anthropic, what gets stored in the database, and what happens with the results — are published for anyone to read and verify.

Read the relevant code →

6. Your rights

You may disconnect your inbox at any time from Settings, which immediately revokes our access to your email account.

You have the right to access or delete your personal data. Account deletion can be initiated from the Settings page.

If you are in the European Economic Area, you have additional rights under GDPR including data portability and the right to lodge a complaint with a supervisory authority.

You're in control.

Disconnect your inbox from Settings and we immediately lose access — no revocation delay, no lingering tokens. Delete your account and your data is gone within 30 days. You don't need to ask us; you can do it yourself.

7. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

We'll tell you if something important changes.

If we ever change how we handle your data in a meaningful way, we'll email you before it takes effect. We won't bury it in a changelog.