Back to home

Privacy Policy

Last updated: March 2026

1. Information We Collect

When you use Inbox API, we collect the following categories of information:

  • Account information, including your name and email address
  • Email account credentials you provide to connect your mailboxes (encrypted at rest; never shared with third parties or language models)
  • Email message metadata and content synced from your connected accounts for API access
  • API usage logs, including request timestamps, endpoints accessed, and response codes
  • Website analytics data such as page views, referrer information, and browser type

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Inbox API service
  • Synchronise your connected email accounts and process API requests on your behalf
  • Monitor and protect the security of our infrastructure and your data
  • Improve the service, diagnose technical issues, and analyse usage patterns
  • Communicate with you regarding service updates, security alerts, and support

3. Credential Security

We take the security of your email credentials seriously:

  • All email account credentials are encrypted at rest using AES-256 encryption
  • Credentials are never transmitted to API consumers, third-party services, or language models
  • API tokens are scoped to specific accounts and actions, and are hashed using SHA-256 before storage
  • Raw API tokens are displayed only once at the time of creation and cannot be retrieved afterwards
  • OAuth tokens are stored server-side and are never exposed through the API

4. Data Sharing

We do not sell, rent, or trade your personal data. We share information only in the following circumstances:

  • With infrastructure providers (hosting, database, and storage services) strictly as necessary to operate the service
  • When required by applicable law, regulation, legal process, or governmental request
  • To protect the rights, property, or safety of CloudWorks, our users, or the public

Your email content is never used for training artificial intelligence models or for any purpose other than providing the service you have requested.

5. Data Retention

  • Account data is retained for as long as your account remains active
  • Email message cache duration is configurable per connected account
  • API usage logs are retained for 90 days
  • Upon account termination, all associated data is permanently deleted within 30 days

6. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal data
  • Export your data in a portable format
  • Terminate your account at any time

To exercise any of these rights, please contact us at the address provided below.

7. Cookies

Inbox API uses only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Contact

For any privacy-related inquiries or requests, please contact us at:

privacy@cloudworks.pt

9. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at the address associated with your account. Continued use of the service after such notification constitutes acceptance of the updated policy.