INBOXCABIN · LEGAL

Privacy Policy

Effective October 12, 2026 · Version 2026-10-12.4

1. Data we process

• Website account: email address, account creation date, sign-in link and session records, and account actions. Sign-in links are short-lived and single-use. We do not require a separate website password.
• Billing: Stripe customer and transaction identifiers, selected plan, payment and renewal status, cancellation/refund information, and associated entitlement. Stripe collects payment details directly. Our application backend does not store full card numbers or card security codes.
• Licensing: original trial dates, license records, activation identifiers, optional computer names and last check-in times. The Windows app derives a product-specific hashed device key from a Windows installation identifier. The backend receives that key and an installation/device ID, not the raw Windows identifier or a MAC address. These identifiers help enforce the trial and ten-computer limit and may persist after reinstallation.
• Local app data: mailbox profiles, cookies, web storage, cached web content, profile images, preferences and any saved login information reside in your Windows user storage. Webmail and the browser runtime can retain this data. Saved secrets use the app’s Windows-backed protection and browser storage mechanisms; anyone with control of your Windows account or device may still be able to access your sessions. Custom images and downloaded attachments are stored locally.
• Service and security records: IP address and request metadata may be processed in hosting/access logs for operation, rate limiting, security and troubleshooting. Download counts record completed file responses, not unique people or confirmed installations. App update and license requests disclose the normal network metadata needed to deliver the service.
• Support: your contact details and information you choose to send. Do not send mailbox passwords, verification codes, sign-in links, complete card details or license keys. If you send a screenshot, remove unrelated private information first.
• Optional analytics: if you allow Google Analytics, it measures public website usage, including page visits, browser/device information and approximate location derived by Google. We do not intentionally send email addresses, license keys, sign-in tokens or mailbox content to Analytics. Account and administrator pages do not load Analytics.

Encrypted cloud backup

When available, you can connect the desktop app to your verified website account and set up encrypted backup. The backup preference starts enabled, but no backup is uploaded until you connect your account and save a recovery key. Backup includes mailbox names, email labels, order, appearance preferences and logins manually saved through InboxCabin. Browser-saved passwords, cookies, active Gmail/Outlook sessions, messages, attachments and profile photos are not included. Restoring on another computer may still require provider sign-in and MFA.

The app encrypts the backup on your computer before upload using a randomly generated recovery key. Our server stores the encrypted copy, its revision and update time; it does not receive that recovery key. You need the same recovery key to restore on another computer. Email authentication alone cannot decrypt your backup, and we cannot recover a lost key. Connected-device records include the device label, account association and authorization dates. Desktop authorization expires after 90 days unless revoked earlier.

You can turn backup off in Global Settings. This pauses uploads on that computer; it does not delete an existing encrypted cloud copy or data already restored elsewhere. You can revoke connected computers on the website. Contact support to request deletion of the cloud copy. Primary-email changes require verification of both addresses and revoke existing website and desktop account sessions; mailbox-provider sessions are separate.

Referral program

If you choose to participate, we store your referral code, consented attribution, first-purchase identifiers, rewards, credit choices, fulfillment references and audit history. Optional referral cookies last 30 days and use first-touch attribution. We honor Do Not Track and Global Privacy Control for new attribution. Expired attribution tokens are removed by scheduled maintenance; aggregate click totals remain. Reward and accounting records are retained for fraud review, support and legal accounting obligations under our retention policy. We do not collect message contents, recipient lists or email-open tracking for referrals. A gift-card claim shares your verified delivery email with the gift-card provider only for fulfillment. We do not store gift-card redemption codes.

Read referral program terms.

2. Why we use it

We use information to provide accounts, deliver sign-in links, process purchases, manage subscriptions, activate licenses, prevent trial abuse and fraud, serve downloads and updates, respond to support, maintain security and meet legal obligations. Optional analytics helps us understand website use. Where data-protection law requires a legal basis, these purposes rely on performance of our contract, legal obligations, legitimate interests in operating and securing the service, and consent for optional analytics. We do not bundle marketing consent into account creation.

3. Service providers and third-party services

We share information only as needed for these purposes with providers including Google Cloud (hosting, database, logs, backups and secrets), Stripe (payments, billing and its Link payment option when offered), Resend (transactional sign-in email), Microsoft 365 (support email), and Google Analytics (optional website measurement). These providers process information under their own applicable terms and privacy practices. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use mailbox contents to train advertising or AI models.

Google/Gmail, Microsoft/Outlook and other websites you access inside or from the app independently process your sign-ins, messages and browsing under their own policies. Microsoft WebView2 and Windows may also process diagnostic or security data under your Microsoft settings. These provider activities are separate from our account backend. See Google’s Privacy Policy, Microsoft’s Privacy Statement, Stripe’s Privacy Policy and Resend’s Privacy Policy.

We may disclose data when legally required, to protect rights and security, or in a business transfer subject to applicable notice and legal protections. We will not silently use a business transfer to remove previously promised privacy protections.

4. Cookies and your analytics choice

The website uses a necessary secure session cookie named __Host-inboxcabin to keep you signed in, normally for up to seven days. It is not readable by website JavaScript. Your analytics choice is stored locally in your browser as inboxcabin.analytics. If you allow analytics, Google may set its own measurement cookies; we configure advertising personalization and Google signals off.

You can change your optional analytics choice below. Declining stops future Analytics loading in this browser and clears accessible first-party Analytics cookies; it does not delete previously collected data from Google. Your choice does not affect account sign-in, payments or app licensing. Browser privacy controls can clear other cookies and storage.

5. Storage, retention and security

Our primary service infrastructure is hosted in the United States; providers may process information elsewhere. We use encrypted connections, restricted backend permissions, protected secrets and access controls. No storage or transmission method is guaranteed secure.

We retain account and license records while needed to provide and support access. Trial eligibility records may be retained after uninstalling or closing an account to prevent trial resets. Billing, fraud-prevention and audit records may be retained after account closure where reasonably needed for legal, accounting, dispute or security purposes. Expired login links and sessions cease to authorize access at expiry and are eligible for cleanup. Backups and provider logs can retain records after removal from the active service until their retention cycles expire. Contact us for information about a particular record rather than assuming uninstalling deletes server data.

Local mailbox profiles are not deleted by removing a computer from the website. Uninstalling may preserve local data to support reinstalling. Use app/Windows controls to remove local data when disposing of a device, and revoke provider sessions separately if needed.

6. Your choices and requests

You can manage billing and computers in My account, download an account overview, and sign out website sessions. To request access to, correction of, deletion of, or a portable copy of personal information, or to exercise objection/restriction or other applicable privacy rights, contact support@inboxcabin.com. We verify requests proportionately and explain any lawful retention or other limitations. Account closure is separate from canceling an annual subscription; we can help with both. We do not discriminate for exercising applicable rights. Depending on your location, you may also complain to your data-protection authority.

The product is intended for adults and business users, not children under 13. We do not knowingly collect children’s personal information. Contact us if you believe a child provided it. If you use InboxCabin for your employer, its policies and administrative access may also apply.

7. Changes and contact

We update the effective date when revising this policy and provide additional notice or obtain consent for material changes where required. Contact Eric Winegar, doing business as InboxCabin, Colorado, United States, at support@inboxcabin.com for privacy questions or to request a mailing address for formal correspondence.