Privacy Policy
Last updated: 23 October 2026
Inbovio is a shared team inbox. It connects the mailboxes a business already has (Gmail, Microsoft 365 / Outlook, and other email providers) into one live feed so a team can read, triage and reply to mail, and be alerted when something needs attention. Inbovio is operated by TSH (“we”, “us”). This policy explains what we collect, why, who we share it with and how to control it. Questions: thesofthub.ca@gmail.com.
What we collect
| What | Why |
|---|---|
| Your account: name, work email address, a hashed password, two-factor settings, role on your team | To sign you in and decide what you may see and do |
| Mailbox connections: the address, server details and the sign-in we use to reach the mailbox (an encrypted password or an encrypted sign-in token from Google or Microsoft) | To read and send mail for you |
| Email data from your connected mailboxes: sender, recipients, subject, a short preview, dates, attachment names and flags; the full message text and attachments only while you open them (kept in a temporary encrypted cache for up to 7 days) | To show your mail in the inbox, search it, sort it, alert you and let your team triage it |
| Team activity: who assigned, handled, archived or trashed an email, internal notes, drafts you write | To run the shared inbox |
| Billing details (handled by Stripe; we never see your card number) | To charge for the service |
| Technical data: sign-in times, devices you are signed in on, IP address, security and error logs | To keep accounts secure and the service running |
Data we receive from Google (Gmail)
If you connect a Gmail or Google Workspace mailbox with “Sign in with Google”, Google asks you to let Inbovio access your mail (the scope https://mail.google.com/, which Google describes as full access to your mail), plus your email address and basic profile. We use that access only to provide the features you see in Inbovio: showing your mail in the shared inbox, searching it at your request, sending the replies and new messages you write, and, only if you switch it on, mirroring read status and archive/trash moves back to your mailbox. We never delete mail permanently.
Limited Use. Inbovio’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide and improve the user-facing features described above.
- We do not sell Google user data, use it for advertising, or transfer it to data brokers or information resellers.
- We do not use it to train generative AI or machine-learning models.
- Our staff do not read your mail. We access email content only with your explicit consent for a specific request, where needed for security or to investigate abuse, or where the law requires it.
- Transfers to the providers listed below happen only as needed to run the features you use.
Optional AI assistant
Inbovio includes an AI assistant (summaries and reply drafts). It is on for new accounts; the account owner can turn it off at any time, and each person can hide its buttons. It runs only when someone clicks the button on a specific email: the text of that one email is sent to Anthropic, which processes it to return the summary or draft. The summary it returns is saved with that email, encrypted with your account’s key, so your team sees it without another request; it is deleted when the email is removed from Inbovio. Anthropic’s commercial API terms do not allow it to train its models on this data.
Who we share data with (our providers)
| Provider | For what |
|---|---|
| Railway (United States) | Hosting of the application, database and queue |
| Amazon Web Services | Key management (the encryption keys that protect your stored sign-ins) and sending our own system emails such as password resets |
| Stripe | Payments and billing |
| Anthropic | The optional AI assistant, as described above |
| Google and Microsoft | Signing in to and reading your Gmail or Outlook mailbox, at your request |
| Browser and phone push services (Apple, Google, Mozilla, Expo) | Delivering notifications you turn on; they may include the sender and subject of new mail |
We do not sell your data. We may disclose it if the law requires it.
How we protect it
- Everything travels over encrypted connections (TLS).
- Mailbox passwords and sign-in tokens are encrypted with per-customer keys, and those keys are protected by AWS Key Management Service.
- Each customer’s data is isolated at the database level, and team members only see the mailboxes they are given access to.
- Two-factor sign-in is required for owners and administrators.
- Remote images in emails are loaded through our server so senders cannot see when or where you open mail.
How long we keep it
- Opened email bodies and attachments: up to 7 days in an encrypted cache, then removed (they stay in your own mailbox).
- Email metadata and team activity: while your account and the mailbox are connected. Disconnecting a mailbox deletes everything we stored for it.
- Emails moved to Trash in Inbovio are emptied after 30 days by default (the account owner can choose 7 to 90 days).
- If you delete your account, we delete your data, except what the law requires us to keep (for example billing records).
Your choices
- You can disconnect any mailbox in Inbovio at any time, and remove Inbovio’s access in your Google account at myaccount.google.com/permissions or your Microsoft account.
- Account owners can export their account data from Settings and ask us to delete the account.
- To access, correct or delete your personal data, email thesofthub.ca@gmail.com.
Children
Inbovio is a business tool and is not directed at children under 16.
Changes
If we change this policy in a way that matters, we will tell account owners by email or in the app before it takes effect. The latest version is always at this address.