Data practices

Privacy policy

Effective October 12, 2026

This policy covers the personal, self-hosted Inbox Zero installation operated by the owner of sands.dev and its informational website, inboxzero.sands.dev. Questions and data requests can be sent to jon@sands.dev. This installation is intended for the operator's own authorized accounts, not public registration.

Data accessed

When an account is connected through Google authorization, the application may access the account name, email address, profile information, OAuth access and refresh tokens, and Gmail messages and metadata. Message data can include senders, recipients, subjects, bodies, timestamps, threads, labels, read status, and attachment data when a feature requests it.

The requested Gmail permissions allow reading and organizing messages, preparing drafts, and accessing basic mail settings. These permission scopes may permit more actions than are currently enabled. Email sending is disabled in this installation.

How data is used

Account and message data is used to display the connected mailbox, help classify and organize messages, summarize content, prepare draft replies, and support enabled email rules and follow-up features. Authentication tokens maintain the connection to Google. The application stores preferences, rule configuration, and processing records needed to provide those features.

AI processing

AI analysis is configured to use a model running locally on the operator's hardware. Message content needed for an analysis may be provided to that local model. This installation is not configured to send messages to a hosted AI provider. Google account data is not used to develop, improve, or train generalized AI or machine-learning models.

Storage and security

Connected-account data and application records are stored on the operator's self-hosted system. OAuth credentials and application secrets are kept in restricted local configuration; sensitive stored credentials use the application's encryption mechanisms. The operator controls access to that system and any backups. No system or storage method can guarantee absolute security.

Sharing and hosting

Google receives requests necessary to authenticate the account and perform authorized Gmail operations. Cloudflare hosts this public informational website and may process standard request information, such as IP addresses and browser information, to deliver and protect it. The public website does not receive connected mailbox data and does not include advertising, analytics scripts, or contact forms.

Google user data is not sold, used for advertising, or shared with data brokers. The operator accesses their own data for the features described here, maintenance, and troubleshooting. Data may be disclosed when legally required.

Retention and deletion

Data is retained as needed to operate the connected accounts and enabled features, or until the operator removes it. The operator manages local databases, processing records, and backups; removing an account's access does not by itself guarantee erasure of all previously stored records or backup copies.

To stop access, disconnect the account in the application where available or remove Inbox Zero from Google Account connections. To request deletion of locally stored data and relevant backups, contact jon@sands.dev. Removing local application data does not delete the original messages in Gmail.

Google API Limited Use

Inbox Zero's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes

This policy will be updated when the installation's data practices change. Material changes, such as enabling hosted AI processing or email sending, should be reflected here before those changes are enabled.