Privacy policy

Last updated October 16, 2026

Inbox Zero (inboxzero.wdaellenbach.com) is a private email triage tool operated by Willis Daellenbach. It is used only by its operator, on his own Google accounts. Nobody else can sign in. This policy explains what data the app accesses and how it is handled.

Inbox Zero's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data the app accesses

Google account identity: email address and basic profile, used to sign in and to confirm the account is allowed.
Gmail messages and threads: headers (sender, recipients, subject, date, Message-ID), message content, and labels.
Gmail settings: filters and labels the app creates to keep sorting in sync.
Actions you take: how you re-sort, archive, or reply to messages, used to improve the sorting rules for your account.

How the data is used

Sorting mail into types (such as Action Required, FYI, Stale) and ordering it by priority.
Writing that sorting back to Gmail as labels, archiving mail you choose to archive, and marking it read.
Showing short summaries of messages and threads.
Sending replies that you write and choose to send.
Finding deadlines in email and creating reminders you've asked for.

Gmail data is used only to provide these features to the account owner. It is not used for advertising, not sold, not used to assess credit, and not used to train generalized AI or machine-learning models.

Where data is processed and stored

Cloudflare hosts the app and its database. The database stores account settings, sorting rules, and a cache of message details (sender, subject, a short snippet, labels, and generated summaries). Google sign-in tokens are encrypted before being stored.
Anthropic (the Claude API) processes message content to sort, prioritize, and summarize it, when those features are on. Anthropic processes this data to return results to the app and does not use API data to train its models by default.
Google remains the home of the mail itself. The app does not keep a full copy of your mailbox.

No other third parties receive Gmail data.

Human access

Only the account owner views the data. Nobody else reads it, except where required for security or by law.

Retention and deletion

Cached message details are removed when mail leaves the inbox, and the cache is cleared on request.
Disconnecting an account in Settings deletes its stored tokens and cached data from the app's database.
Access can also be revoked at any time at myaccount.google.com/permissions.

Security

All traffic uses HTTPS. Sign-in tokens are encrypted at rest. Access to the app is limited to its owner's allowlisted Google accounts.

Changes

This policy is updated when the app's data use changes. The date above shows the latest version.

Contact

Willis Daellenbach · wdaellenbach@gmail.com