Privacy policy.

Who operates Clean My Inbox

Clean My Inbox is an independent project operated by Rishi at cleanmyinbox.space. Contact rishidv2005@gmail.com with privacy questions or requests.

Information we access and collect

• Account access: your connected Gmail address and OAuth access and refresh tokens. Google handles sign-in; Clean My Inbox does not receive your Google password.
• Email information: message identifiers, sender and recipient information, subjects, dates, labels, mailing-list headers, and relevant email text. Inbox discovery uses metadata, without message bodies or snippets. Cleanup can read email text and relevant sender history. Sent-mail history helps identify people you have contacted; no Google Contacts permission is requested.
• Your instructions: preferences, written answers, exceptions, unresolved questions, and scheduling settings.
• Activity and operation records: selected email metadata and excerpts, AI decisions, cleanup counts, label snapshots for undo, subscription requests, session records, and technical logs. Hosting services may process request metadata such as IP addresses and timestamps.

Clean My Inbox does not download attachments or create a complete backup of your mailbox. The current cleanup workflow selects up to 100 unread messages in Gmail's Primary inbox per run; relevant sender-history checks can look beyond that sample.

What we use it for

We use this information to discover inbox topics, ask relevant questions, remember your choices, assess messages, and perform the actions you authorize: mark as read, archive, or both. We also use it to run your chosen schedule, provide activity and undo, handle supported unsubscribe requests, secure the service, and prevent duplicate or uncertain actions.

Google's gmail.modify permission allows broader access than the features we provide. Clean My Inbox does not send emails, permanently delete email, or use that permission for unrelated features. Unsubscribing requires separate permission and contacts the mailing-list service.

AI processing and service providers

When you allow AI processing, relevant message data and your preferences are sent to Nebius Token Factory to generate questions and decisions using NVIDIA Nemotron. Discovery sends subjects, sender information, dates and related metadata. Cleanup can also send up to 12,000 characters of extracted email text per message and limited relevant history. Attachments are excluded.

Clean My Inbox does not use Google user data to train or fine-tune generalized AI models. Nebius's Data Processing Agreement also excludes model training on customer content unless the customer requests it; Clean My Inbox does not request such training. This service does not promise zero-retention inference. Unless zero data retention is enabled, Nebius may retain inference content for its documented speculative-decoding purpose. Provider metadata and backup retention follow its terms.

Other providers process data to operate the service: Google supplies Gmail access, application hosting on Google Cloud Run, credentials infrastructure and scheduling; Neon hosts the application database. Authorized unsubscribe requests share the necessary request with the sender's mailing-list provider. Support messages are handled through the contact email above. Processing may occur outside your country, including in the United States.

We do not sell your Google user data, use it for advertising or credit decisions, or share it with data brokers. Human access is limited to what you specifically authorize, necessary security or support investigations, or legal requirements.

Google API Limited Use

Clean My Inbox follows the Google API Services User Data Policy, including its Limited Use requirements, when using or transferring information received from Google APIs. Google user data is used to deliver the inbox-management features you authorize, not to build generalized AI models.

Storage, protection and retention

OAuth tokens and selected saved AI records, such as preference memories and decision payloads, are encrypted by the application. Some operational identifiers and settings are stored separately. Access uses HTTPS. No system can guarantee absolute security.

• Account settings, preferences, unresolved questions, message assessments and relevant action records are retained while your account is connected so the agent can operate consistently.
• The latest ten detailed agent logs per account are retained. Label snapshots for completed or undone actions expire after 30 days during maintenance; message identifiers may remain to prevent repeat actions.
• Preference-change history older than 180 days is removed during maintenance. Browser sessions expire after 30 days, and expired sign-in records are cleared.
• Completed account disconnection removes account-linked information from the active application database. A minimal hashed usage record may remain to enforce free-usage limits and prevent abuse; it does not contain email content.

Provider security logs and backups can persist under provider retention schedules after active records are deleted. Deleting an Clean My Inbox account does not delete the original emails in Gmail or immediately remove records independently retained by Google, Nebius, Neon, or mailing-list providers.

Your choices and deletion requests

You can edit preferences, pause daily routines, review questions, and undo eligible cleanup actions in the app. Logging out does not stop a saved daily routine. To stop access and remove your account, use Preferences → Account settings → Disconnect & remove account data. A completed disconnection revokes Google access and removes the account's active application records. If revocation fails, the app pauses the routine and asks you to retry rather than claiming deletion succeeded.

You can also revoke access in your Google Account connections; revocation alone does not submit an Clean My Inbox data-deletion request. To request access, correction, deletion, or help exercising rights available under applicable law, email the address below. We may need to verify that the request comes from the account owner.

Cookies, eligibility and changes

We use an essential session cookie to keep you signed in and protect account actions. We do not use advertising cookies or third-party analytics scripts in this release. Clean My Inbox is intended for adults who can authorize access to the connected account. We may update this policy as the service changes; the effective date above identifies the current version. Materially different data uses require appropriate notice and consent.

Questions about your data?

Contact rishidv2005@gmail.com. Please identify the connected account and your request, but never send passwords, OAuth tokens, or API keys.