Legal

Privacy Policy

Effective date: 1 March 2026 · Last updated: 1 March 2026
01

Overview

Inbo ("we", "our", "us") is an AI-powered email assistant built to help professionals manage their inbox more efficiently. This Privacy Policy explains what information we collect, how we use it, and what rights you have over your data.

Inbo is operated by SGGECOM Ltd, based in Glasgow, Scotland, United Kingdom. By using Inbo you agree to the practices described in this policy.

Plain English summary: We only collect what we need to make the product work. We don't sell your data. We don't use your emails to train AI models. You can delete your data at any time.

02

Information we collect

We collect the following information when you use Inbo:

  • Account information — your name and email address when you register
  • Authentication tokens — OAuth tokens used to connect your Gmail account securely
  • Email metadata — sender name, sender email address, subject line, timestamp, and category
  • Email content — the body of emails, used to categorise them and generate draft replies
  • Usage data — how you interact with the Inbo interface, for product improvement purposes
03

Gmail data and Google API usage

Inbo connects to your Gmail account via Google's official OAuth 2.0 API. We request the following permissions:

  • Read emails — to display your inbox and categorise incoming messages
  • Compose and create drafts — to generate AI-drafted replies and save them to your Gmail Drafts folder
  • Send emails — to send replies you have reviewed and approved within Inbo
  • Modify emails — to apply Inbo category labels to messages and mark emails as read

Important: Inbo's use of Gmail data is strictly limited to providing and improving the core product features described above. We do not use Gmail data to serve advertising, and we do not allow humans to read your email content except where required for security investigation or to comply with applicable law.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

04

How we use your data

We use your data solely to provide, maintain and improve the Inbo service:

  • Categorising incoming emails as Urgent, Reply Needed, FYI, or Marketing
  • Generating AI-drafted replies to emails that require a response
  • Applying Gmail labels to keep your inbox organised
  • Displaying your inbox and email content within the Inbo interface
  • Sending replies you have approved through the Inbo interface

Email content is processed by Anthropic's Claude AI API to generate categorisations and draft replies. Anthropic's data processing is governed by their own privacy policy and does not use your data to train AI models.

We do not use your data for advertising, profiling, or any purpose unrelated to the core email assistant functionality.

05

Data sharing and third parties

We do not sell your personal data. We share data only with the following third-party services necessary to operate Inbo:

  • Anthropic — email content is sent to Anthropic's API to generate AI categorisations and draft replies
  • Google — we access your Gmail account via the Google API on your behalf
  • Render — our hosting provider where Inbo's servers and database run

We may disclose your information if required by law or to protect the rights, property, or safety of Inbo, our users, or the public.

06

Data retention

We retain your email data for as long as your account is active. Email content stored in our database is limited to the most recent 500 emails per account.

When you disconnect your Gmail account or delete your Inbo account, all associated email content, OAuth tokens, and personal data are permanently deleted from our servers within 30 days.

07

Security

We take reasonable technical and organisational measures to protect your data, including:

  • All data transmitted between your browser and our servers is encrypted via HTTPS
  • OAuth tokens are stored securely and never exposed to the client
  • Our database is stored on a private persistent disk not accessible from the public internet
  • Access to production systems is restricted to authorised personnel only

No method of transmission or storage is 100% secure. If you discover a security vulnerability please contact us immediately at hello@getinbo.io.

08

Your rights

You have the following rights over your data:

  • Access — request a copy of the personal data we hold about you
  • Correction — ask us to correct inaccurate or incomplete data
  • Deletion — request deletion of your account and all associated data
  • Disconnect — revoke Inbo's access to your Gmail at any time via your Google Account permissions
  • Portability — request an export of your data in a machine-readable format

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

09

Contact us

If you have any questions about this Privacy Policy or how we handle your data, please get in touch:

SGGECOM Ltd
Operator of Inbo — Glasgow, Scotland, United Kingdom
hello@getinbo.io

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or via a notice within the Inbo application.