Privacy Policy
Last updated: June 2026
Operator: LuSoft ("we", "us") Product: InboxSweep Chrome extension Contact: [email protected]
Summary
InboxSweep is a local-first Gmail cleanup extension. Your email content and mailbox metadata are processed only in your browser. We do not sell user data, use Gmail data for advertising, or train AI models on your emails.
What we do not collect
We do not collect or store on servers we operate:
- Email bodies
- Email subjects
- Sender lists or message IDs from your scans
- Gmail search results or scan output
- OAuth tokens
What is processed locally
When you use InboxSweep, the extension accesses Gmail through the Google Gmail API to:
- Read message metadata (sender, date, labels, selected headers such as List-Unsubscribe)
- Archive, move to Trash, mark as read, and modify labels — only after you confirm
- Create Gmail filters you approve
This processing happens on your device. Scan results, protected senders, settings, and your license key are stored in `chrome.storage.local` on your computer.
Data sent to third parties
InboxSweep uses the Chrome Identity API and Google OAuth with the `https://www.googleapis.com/auth/gmail.modify` scope. Authentication and Gmail access are handled by Google under Google's Privacy Policy.
You can revoke access anytime: Google Account permissions.
Lemon Squeezy (paid plans only)
If you purchase Personal or Pro:
- Lemon Squeezy processes payment and issues a license key (Lemon Squeezy Privacy Policy).
- The extension sends your license key and a hashed Gmail identifier to Lemon Squeezy's License API to validate your plan and enforce account limits (1 inbox on Personal, unlimited on Pro).
- We do not run our own license database. We do not receive your Gmail messages or OAuth tokens on any server we operate.
Card details are handled only by Lemon Squeezy; InboxSweep does not store payment card numbers.
Payments
Paid plans are one-time purchases in USD via Lemon Squeezy. There is no in-extension subscription billing.
Website
This marketing site may use standard analytics or hosting logs operated by LuSoft for the umbrella website. That logging does not include your Gmail content. The extension's Gmail processing remains local-first as described above.
Children's privacy
InboxSweep is not directed at children under 16. We do not knowingly collect personal data from children.
Changes
We may update this policy. The "Last updated" date at the top will change. Material changes will be reflected on this page.
Contact
Privacy questions: [email protected]