Privacy Policy

This Privacy Policy governs your use of Inbox Sentinel ("the Service", "the Platform", "we", "us", or "our"), operated by Md Noor Hasan Ansari, located in India. We provide AI-assisted inbox triage, consequence scoring, executive context extraction, and automated workflow notifications.

By accessing or using Inbox Sentinel, you acknowledge that you have read, understood, and consented to the data practices described herein. If you do not agree, you must immediately disconnect your accounts and discontinue using the Service.

We practice strict data minimization. We only collect information strictly necessary to provide intelligent triage and secure account administration:

• Account & Profile Information: Full name, primary email address, Google account ID, and avatar image obtained during Google OAuth 2.0 authentication.
• Communication Metadata: In-flight email subject lines, sender names, recipient headers, dates, message snippets, and priority signals required to compute consequence and urgency metrics.
• Personal Intelligence Attributes: Professional titles, core focus domains, key project names, and custom guidance attributes configured manually by you or confirmed via the Observation Review Gate.
• BYOK API Keys (Optional): If you activate Bring-Your-Own-Key processing, your personal Google Gemini or OpenAI API keys are encrypted immediately with AES-256-GCM and never stored in plaintext.
• Operational Telemetry: Anonymized audit logs, timestamped error logs, rate-limit indicators, and security logs used to prevent fraud and maintain platform integrity.

To evaluate incoming communications, Inbox Sentinel requests explicit, restricted OAuth scopes from Google. Our technical architecture enforces strict operational boundaries:

Email payloads fetched for consequence analysis are parsed transiently in ephemeral memory and discarded upon completion of the analysis pass.

• We do not transfer or disclose Google user data to third parties, except as strictly necessary to provide the service (such as calling AI inference endpoints via TLS), comply with applicable laws, or as part of a corporate merger.
• We never use Google user data for serving advertisements, personalized marketing, retargeting, or credit evaluation.
• We do not permit humans to read Google user data unless you provide affirmative agreement for specific troubleshooting or when required by court subpoena.

We process email text through state-of-the-art Large Language Models (primarily Google Gemini API and OpenAI enterprise endpoints). We provide the following institutional legal commitments:

For users on the Ultra Plan, the Platform maintains an autonomous Personal Intelligence Profile to deliver executive triage calibration:

• • User-Authored Profile Items: Professional context, strategic priorities, and VIP designations entered manually by you.
• • Observation Review Gate: Inferences derived automatically from communication patterns are staged in a pending state until explicitly approved by you.
• • Full Portability & Purge: You maintain the unconditional right to inspect, edit, or permanently purge any or all stored intelligence attributes instantly from Settings > Intelligence.

Payments for Pro and Ultra subscriptions are processed exclusively via Razorpay (Razorpay Software Private Limited), an RBI-authorized payment aggregator certified under PCI-DSS Level 1.

• • No Card Storage: Inbox Sentinel servers never receive, process, or store credit card numbers, debit card PINs, CVVs, or bank net banking credentials.
• • Stored Billing Records: We store only non-sensitive transactional identifiers (Razorpay Order ID, Payment ID, payment timestamp, currency, amount billed, and subscription plan status) to maintain your license and issue tax invoices.
• • For complete payment terms, visit our dedicated Cancellation, Refund & Payment Policy.

We employ defense-in-depth infrastructure safeguards to protect your personal data:

We retain personal information only for the minimum duration necessary:

• • Transient Email Data: Raw email bodies are processed in-memory and discarded upon completion of AI consequence scoring.
• • Triage Summaries: Urgency ratings and bullet summaries are retained to display your dashboard feeds and analytics until you clear them.
• • Account Purge Guarantee: If you request account closure or delete your profile, all corresponding database records (tokens, personal profile items, cached metrics, order references) are permanently eradicated within 30 calendar days, except where retention is legally mandated by tax regulations.

Notifications to mobile devices are strictly opt-in:

• • No Raw Body Transmission: Only the distilled AI summary, urgency score, and required action item are transmitted over WhatsApp (Meta Cloud API) or Telegram Bot API. Full email bodies are never broadcast across third-party messengers.
• • Revocation: You can disconnect your Telegram or WhatsApp routing anytime from Settings > Integrations.

We partner with trusted enterprise cloud vendors to deliver Inbox Sentinel:

Under applicable data protection laws (including the Digital Personal Data Protection Act, 2023 and GDPR where applicable), you enjoy full autonomy:

• • Access & Portability: Request an export of your stored personal intelligence attributes and profile data.
• • Revocation of Google Access: You can unilaterally revoke Inbox Sentinel's access to your Google account at any moment via Google Account Security Permissions.
• • Right to Erasure: Delete your account and request complete eradication of data by emailing support.

Inbox Sentinel is strictly intended for individuals who are at least 18 years of age (or the legal age of majority in their jurisdiction). We do not knowingly collect or solicit personal data from children under 18.

We may revise this Privacy Policy periodically to reflect technological, operational, or legal developments. When changes are made, we will update the "Last Updated" date at the top of this document. Continued use of the platform after notice of modifications constitutes your acceptance of the revised terms.

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of the designated Grievance Officer for Inbox Sentinel are: