InboxSweep is a browser extension that helps you find email messages from a sender you specify, preview matching messages, and move them to your email provider's Trash or Deleted Items folder after confirmation. This policy describes the data handling in the current extension.
1. Information accessed
When you choose to connect a supported email account, InboxSweep requests permission to access the account through the provider's authentication system. To perform sender cleanup, it accesses sender addresses, message identifiers, and other limited message metadata needed to find eligible messages and protect starred or flagged messages when you enable that option. InboxSweep does not need to read message bodies to perform its current cleanup workflow.
2. How information is used
- Authenticate your selected email account through Google or Microsoft OAuth.
- Search for messages matching the sender email address you enter.
- Show the number of matching messages before you take action.
- Move the matching messages to Trash or Deleted Items only after you confirm.
- Honor your selected starred/flagged message protection option.
InboxSweep does not permanently delete messages through its current cleanup action. Your email provider controls Trash retention and eventual deletion.
3. Storage and retention
InboxSweep stores the Google and Microsoft OAuth client IDs you configure in Chrome extension local storage. Microsoft access tokens are temporarily held in extension session storage; Google authentication tokens are managed through Chrome's identity system. Search results and message identifiers are processed to perform the requested cleanup and are not intentionally maintained as a separate permanent email archive by the current extension.
4. Sharing and third parties
InboxSweep communicates directly with Google Gmail API, Microsoft Graph API, and the corresponding authentication services to carry out actions you request. The current extension does not include an independent analytics or advertising service, and does not sell email data or use it for advertising. Google and Microsoft handle account information under their own privacy policies.
5. Security and user control
InboxSweep uses provider-supported OAuth rather than asking you to enter your email password into the extension. You can stop using the extension by removing it from your browser and revoke previously granted access through your Google Account or Microsoft Account security settings. Removing the extension does not undo messages already moved to Trash.
6. Children's privacy
InboxSweep is not specifically designed for children, and the developer does not intentionally collect children's personal information.
7. Changes to this policy
This policy may be updated as InboxSweep changes. The effective date at the top of this page will be revised when the policy changes materially.