Privacy policy

Mailroom Lite (the browser edition of Inbox IQ). Last updated October 27, 2026.

The short version

Mailroom Lite runs entirely in your web browser. Your browser talks directly to Google. Your email, your Google sign-in, and the app's copy of your mail never reach the server that hosts this website, and the people who run it cannot see them.

What the app accesses

With your permission, the app uses Google's Gmail API to read message details (sender, recipients, subject, date, labels, a short preview, and unsubscribe headers) so it can group mail by sender. It opens a full message only when you open it. It changes your mailbox only when you ask it to: archive, label, mark read or unread, and move to trash. It never sends or drafts email, and it never permanently deletes anything.

It asks Google for your email address so it can show which account is connected.

Where your data is stored

The app keeps a cache of message details in your browser's private storage on your device, so it can open quickly. Message bodies are not stored. Your Google access token is kept in memory only and is gone when you close the app.

This website's server only delivers the app's files. It receives no email data, no tokens, and no record of what you do in the app. Like any web server, it keeps standard access logs (IP address, time, and which file was requested).

What leaves your device

• Requests to Google's servers, to read and organize your mail.
• Images inside an email, but only after you choose "Show images" for that email. Remote stylesheets and fonts inside emails stay blocked by this site's security policy, so some emails will look plainer than they do elsewhere.
• Unsubscribe requests to a sender, but only when you ask to unsubscribe from that sender.

Nothing is sold, shared with advertisers, or used to train AI models. There are no analytics or tracking scripts.

What this site's security policy enforces

This site sends a Content Security Policy that limits the app's own network connections to Google (and to this site, for the app's files), so you can check in your browser's developer tools that your mail goes only where this page says. Two things are deliberately left open: images from other hosts, because emails contain them and they load only after you choose "Show images", and the page a sender's unsubscribe link opens, which is contacted only when you ask to unsubscribe. The policy is a visible safeguard, not proof: you are still trusting the code this site serves.

Google API Services User Data Policy

Mailroom Lite's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Removing your data

Signing out in the app deletes its cached copy from your device. Clearing this site's data in your browser does the same. To remove the app's access to your Google account, visit your Google account's third-party connections and remove Mailroom Lite.

Questions

Mailroom Lite is invite-only. Contact the person who invited you.