Legal
Privacy Policy
Last updated on June 7, 2026. We are committed to transparency and safeguarding your personal and email data.
1. Introduction
Welcome to Inbox Lenz. We provide a SaaS platform and browser extension designed to help you turn overloaded email inboxes into actionable knowledge.
This Privacy Policy explains how we collect, use, share, and protect your information when you visit our website (inboxlenz.site), use our browser extension, and subscribe to our services. By using our services, you consent to the practices described in this policy.
2. Information We Collect
We collect information to provide a secure, personalized, and efficient experience:
- Account Information: When you register or sign in, we collect your name, email address, and authentication credentials. This service is facilitated securely by our identity provider, Clerk.
- Billing & Subscription Info: If you upgrade to a paid plan, payments are processed by Lemon Squeezy (our Merchant of Record). They collect your billing address and payment details. We only store subscription metadata (plan type, status, and renewal dates) and never store credit card numbers.
- Technical & Usage Data: We automatically collect information about how you use our browser extension and website, including browser type, operating system, extension version, and performance diagnostics.
3. Email Data & AI Processing
Because Inbox Lenz interfaces with your inbox (Gmail and Outlook), we treat your email data with the highest standard of confidentiality and security:
How the Extension Accesses Data: When you trigger a summary, the browser extension reads the active email thread (subject, sender, timestamp, and message body).
Transient API Processing: This email text is encrypted and sent to our secure backend API. It is passed transiently to Large Language Model (LLM) providers (such as OpenAI, Anthropic, or Google Cloud) to generate the summaries and action items.
No Retention of Raw Emails: We do not write your raw email bodies or email headers to persistent databases. They are held in memory solely for the duration of the API call and immediately purged.
Zero Training: We have strict API agreements with our LLM providers ensuring that any data sent via our API is never used to train their models.
Local Storage: Summaries are stored in your browser's local cache so you don't have to regenerate them. You can clear this cache at any time inside the extension settings.
4. How We Use Your Information
We use the collected information for the following purposes:
- To authenticate users and secure account access.
- To generate email thread summaries and smart reply drafts.
- To process billing, maintain active subscriptions, and prevent fraud.
- To monitor application performance, fix bugs, and improve the user experience.
- To communicate with you regarding updates, support requests, and service announcements.
5. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data. We only share data with trustworthy third-party sub-processors essential to operating our SaaS:
| Service Partner | Purpose | Data Handled |
|---|---|---|
| Clerk | User Authentication & Profile | Email, Name, Auth tokens |
| Lemon Squeezy | Billing & Subscription Management | Billing info, Payment status |
| LLM Providers (API) | AI Summarization & Drafts | Transient email content (zero-retention) |
| Vercel / Hosting | Web Application Hosting | Encrypted backend traffic |
6. Data Security & Retention
We implement robust security measures, including HTTPS encryption in transit and AES encryption at rest, to prevent unauthorized access.
Account profiles and billing status are retained as long as your account exists. If you choose to delete your account, this data will be permanently deleted from our databases and sub-processors within 30 days.
7. Your Rights & Choices (GDPR/CCPA)
Depending on your location, you may have legal rights regarding your personal data:
- Access & Export: Request a copy of the personal data we hold about you.
- Correction: Correct inaccurate or incomplete information.
- Deletion: Request that we erase your personal data.
- Data Portability: Request transfer of your data to another service provider.
To exercise any of these rights, please contact us at support@inboxlenz.site.
9. Children's Privacy
Our services are not designed for or targeted at children under the age of 13. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our technology or legal requirements. When updates are made, we will revise the "Last updated" date at the top of this page.
11. Contact Us
If you have any questions or feedback regarding this Privacy Policy or how your data is handled, please reach out to us at:
Inbox Lenz Support
Email: support@inboxlenz.site