Multinbox — Privacy Policy

Effective October 21, 2026. Multinbox is a personal, self-hosted tool, not a commercial service.

Who this covers

Multinbox runs on the computer of the person who installs it, under their own Google account and their own Google Cloud OAuth credentials. That person is the only one whose data it touches. There is no Multinbox company, server, or hosted service, and there are no other users.

What data it accesses

With the user's explicit Google consent, Multinbox uses the Gmail API with one scope, gmail.modify. Through it, the application reads:

Message headers — sender, recipients, subject, date, and unsubscribe headers.
Message text, used to sort mail and to find dates such as deadlines, appointments, and bill due dates.
Label information, so it can tell what it has already filed.

It does not access Google Drive, Calendar, Contacts, or any Google product other than Gmail.

What it does with that data

The data is used for exactly one purpose: sorting the user's own mail and presenting it back to them. Specifically, Multinbox applies labels under Triage/, removes INBOX from low-value mail so that it is archived, and builds a single HTML page summarizing recent mail.

Multinbox never sends email, never moves messages to Trash, and never deletes messages. The only modifications it makes are adding its own labels and removing a message from the inbox. Both are reversible by the user at any time.

When the user explicitly selects bulk senders to unsubscribe from, Multinbox sends a standard one-click unsubscribe request (RFC 8058) to the unsubscribe address published by that sender in their own message headers. No other data is sent with it.

Where the data is stored

On the user's computer only. A rolling index of roughly the last 30 days of mail — sender, subject, a short text excerpt, and the assigned tier — is written to local files inside the application's own folder.
OAuth tokens are stored in local files readable only by the user's account, and can be deleted at any time.
The reading page is an HTML file on the user's computer. The user may optionally publish it as a private page in their own Claude account, visible only to them unless they choose to share it.

Nothing is transmitted to the author of Multinbox or to any analytics, advertising, or tracking service. There are none in the application.

Sharing

Google user data is never sold, rented, or shared with third parties. It is not used to train any machine learning or AI model. It never leaves the user's own machine and their own Google account, except for the optional private page described above, which stays inside the user's own Claude account.

Limited Use disclosure

Multinbox's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

The local index keeps roughly the last 30 days of mail and discards older entries automatically. The user can erase everything at any time by deleting the application's folder, which removes the stored index, the generated page, and the OAuth tokens.

Access can be revoked independently at any time at myaccount.google.com/permissions. Revoking access immediately stops all further reading of mail. Labels already applied in Gmail remain until the user removes them, and no mail is lost by revoking.

Changes

If this policy changes, the revised version will be posted at this address with a new effective date.

Contact

Questions about this policy or about the application: samuelpizza2427@gmail.com.