Last updated: June 24, 2026

Privacy Policy

CleanBox ("we", "us") helps you triage your inbox using AI. This page explains what data we collect, how we use it, and the controls you have. This page is maintained by the CleanBox team to answer common privacy questions about the product.

1. Information we collect

  • Account data — your email address and (optionally) display name and avatar, used to sign you in and contact you about the service.
  • Email metadata you import — sender, subject, snippet, body, received-at, and an AI-assigned category. While CleanBox is in beta, Gmail integration is simulated with sample data; no real Gmail messages are read.
  • Preferences — UI settings stored on your profile (e.g. aggressive mode, display name).
  • Diagnostic data — minimal logs we use to keep CleanBox running and to detect abuse.

2. How we use your data

  • To classify and organise the emails you import.
  • To run, secure, and improve the service.
  • To send transactional messages (sign-in, password reset, account notices).
  • We do not sell your personal data or use email contents for advertising.

3. AI processing

Email text you submit (either pasted into the demo or imported into your inbox) is sent to our AI provider via Lovable AI Gateway solely to return a category, confidence score, and short reason. Inputs are not used to train external models.

4. Subprocessors

  • Lovable Cloud (managed Supabase) — authentication, database, hosting.
  • Lovable AI Gateway — AI classification.

5. Data retention & deletion

We keep your data as long as your account is active. You can delete individual emails from your dashboard at any time. Account deletion and full data export are on the roadmap; in the meantime, email support@cleanbox.app and we'll remove your data within 30 days.

6. Security

All data is stored on encrypted volumes. Row-Level Security ensures every database query is scoped to your account; nobody else can read your emails or profile. Passwords are hashed and screened against the Have I Been Pwned database to block known-leaked passwords.

7. Your rights

Depending on where you live (GDPR / CCPA), you may have the right to access, correct, export, or delete your personal data. Contact us at support@cleanbox.app to exercise these rights.

8. Children

CleanBox is not directed to children under 13. We do not knowingly collect their data.

9. Changes

If we make material changes to this policy, we'll notify you by email or in-app before they take effect.

10. Contact