Privacy Policy

InboxPilot stores only the data needed to provide safe email triage: account details, mailbox connection metadata, encrypted mailbox credentials, scan summaries, approved rules, and audit events.

Mailbox passwords or app passwords are encrypted at rest and are never returned to the browser. Email scans are used to classify risk and cleanup candidates.

Users can export or delete their account data from Settings. Production Stripe/OAuth details will be added when those integrations are configured.