What Jamespot Inbox keeps, and what it does not do

Inbox syncs your mailboxes, reads what matters in them and hands it to the assistant you authorized. Here is what that means for your data.

What the service keeps

Your identity when you sign in (Jamespot, Google or a code by e-mail): the identifier that provider gives, your name and your e-mail.
Your mailboxes' settings: address, servers, login, and the encrypted password (AES-256-GCM), never shown, logged or handed to your assistant.
A copy of your mail: the synced folders (all but trash, junk and drafts, or the ones you chose), over the period you chose (90 days by default), with the list of their attachments. The text of a PDF is read only when your assistant asks for it.
What Inbox read in it: people, deadlines, requests, themes, a one-sentence summary, each item tied to its mail.
The assistants you authorized and their access tokens, which expire.
A technical log: the date, the action, the IP address, kept 90 days. Never a mail's content, never an e-mail address, never a password or a token.

It sends no mail, deletes nothing, moves nothing, marks nothing as read in your mailbox. The only thing it puts there is a draft, when you ask.
It does not sell or share your data, and shows no advertising.
To read a received mail (people, deadlines, requests), Inbox sends its text to Mistral AI's model. Newsletters and automatic mail are not sent.
It does not write the synthesis: your assistant writes it, at its provider and under its terms.
No trackers: five technical cookies at most, your session (7 days), the sign-in under way (10 minutes), the pending code by e-mail (10 minutes), the name of the sign-in you used last, to offer it to you, and your choice of language, if you made one.

Everything is hosted by Clever Cloud, in France (Paris region).
The copy follows your mailbox: a mail deleted or moved out of the synced folders leaves Inbox at the next sync, and a mail older than the chosen period is erased every day.
Removing a mailbox in “My mailboxes” erases its settings, its password and its whole copy: mails, attachments, what was read in them.

You can ask to access, correct or delete your data by writing to dpo@jamespot.com. We answer within one month.
Controller: JAMESPOT, 66 rue Marceau, 93100 Montreuil, France, registered in Bobigny under RCS 483 321 378.
You can also lodge a complaint with the CNIL (cnil.fr).
The rest of Jamespot's privacy policy applies: jamespot.com/politique-de-confidentialite.