inbox-triage privacy policy

What data it reads

With your permission, inbox-triage reads these headers from messages in your Gmail inbox: From (sender address and display name), Subject, Date, List-Id, List-Unsubscribe, Precedence, and Auto-Submitted, plus Gmail's message and thread IDs and labels. It does not read message bodies or attachments.

How it uses that data

• To decide whether a sender is a promotion or newsletter, and if so to label and archive that sender's messages.
• To write a local digest listing what was archived.

It never deletes, sends, forwards, or replies to mail, and never changes account settings.

What is stored, and where

• A list of sender addresses and the group each was sorted into, the digest, and a small run-state file. These live on a private computer controlled by Eric Minish.
• The Google sign-in token is kept in a private password vault and is used only by the tool's daily run.

Nothing is sold, used for advertising, or shared for any other purpose.

Third parties

For a sender the tool has not seen before, it may send that sender's address, display name, and up to three subject lines (shortened) to a language-model service (OpenRouter) to suggest which group the sender belongs in. No message bodies are sent. No other data leaves the computer the tool runs on, apart from the tool's own connections to Google.

Google API Services User Data Policy

inbox-triage's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your choices

• Revoke access at any time at myaccount.google.com/permissions. The tool stops working for your account immediately.
• Ask for your stored sender list and digest to be deleted by writing to [email protected]; it will be deleted within 30 days.

Changes

If this policy changes, the effective date above will change with it.