Consent notice · Version 2026-11-04.2
Your inbox.
Your trust.
We will never sell your mailbox data or give third parties access to it. Your data is used internally to operate, develop and improve MyCleanInbox and for the in-house email research and analytics described below.
Signup activity
We record the email addresses you submit and signup activity, such as steps, clicks and errors, to understand and improve MyCleanInbox. Submitted email addresses stay within our service. PostHog processes anonymous signup actions and the campaign tracking reference to help us improve signup. It never receives your email address, app password, or mailbox search terms or contents.
What a connection allows
With your explicit consent, the service stores your mailbox identity, encrypted connection credential, consent record, folders, synchronization state and mirrored emails. A mirrored email includes its full original content, headers and embedded attachments. Mirrored content is stored searchably in our service database for these purposes.
In-house email research and analytics
We use mirrored emails for in-house research and analytics about the email ecosystem and email marketing, including competitor analysis. This includes identifying senders and the organizations behind them; studying campaigns, offers, message topics, sending frequency and trends; and comparing inbox and junk placement. We combine observations across consenting mailboxes and compare them with public or commercial reference data. We use manual and automated methods to classify, group, search and summarize messages and to build and evaluate internal research tools and reports.
Authorized staff may inspect relevant mirrored messages, including original headers and content, for these purposes. When you agree to this notice, these purposes cover relevant messages already stored and messages imported afterward. We use pseudonymous panelist labels in research summaries; original messages can still contain personal information. Research stays in-house: we do not sell mailbox data, send your mailbox contents to external research or AI providers, or give third parties access to your mailbox.
Our features and analysis methods may evolve within these stated purposes. If we introduce a materially different purpose, we will explain it and obtain any additional permission required before using your messages for it.
What our software does
The fetching software reads accessible folders and messages without marking them read, moving, deleting or sending them. Your provider’s app password may grant broader access; this is a limit on our software’s behavior.
How we protect the connection
We encrypt and save submitted connection details before verifying mailbox access. Saved details become a connected mailbox only after verification succeeds. App passwords are encrypted before storage and are never saved in browser storage. Your messages are stored in our service database. Your personal connection status and search results are available through your signed-in browser session. Separately, authorized staff may access relevant messages for the internal research described above.
Provider control
You can revoke the generated app password in your provider’s security settings. Revocation stops future access; it does not by itself erase an already stored copy.