Privacy Policy

Overview

Boxento builds local-first personal software. Boxento Mailbox is a Mac desktop email client that connects directly to Gmail from your device. Boxento does not operate a hosted mailbox sync service, does not proxy Gmail API calls, and does not store your email on Boxento servers.

Google data Boxento Mailbox accesses

If you connect a Gmail account, Boxento Mailbox requests permission to access Gmail and basic Google profile data. Depending on the features you use, the app may access your email address, profile name, profile image, Gmail message identifiers, thread identifiers, labels, headers, senders, recipients, subjects, snippets, message bodies, attachments, draft content, and mailbox history cursors.

How Google data is used

Boxento Mailbox uses Gmail data only to provide user-facing email features inside the desktop app: connecting your account, showing and searching your inbox, caching messages locally, displaying threads, downloading attachments you request, applying labels, archiving, trashing, marking mail read or unread, creating drafts, sending mail, and running mailbox workflows you initiate.

Boxento does not use Gmail data for advertising, does not sell Gmail data, and does not use Gmail data to train generalized AI models.

Storage and processing

Mailbox stores email cache data and settings locally on your Mac. OAuth tokens are stored locally using operating-system secure storage when available, with a local-only fallback if secure storage is unavailable. The app sends Gmail API requests directly from your Mac to Google.

Local AI is the default AI path. If you explicitly configure a cloud AI provider, selected email content needed for the action may be sent from your Mac directly to that provider. Boxento does not route mailbox AI requests through a Boxento-hosted service.

Sharing

Boxento does not share Gmail data with third parties except as needed to provide features you explicitly configure, such as a cloud AI provider selected by you. Boxento Mailbox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Deletion and revocation

You can disconnect Gmail inside Boxento Mailbox to remove local Gmail tokens from the app. You can also revoke Boxento Mailbox's access from your Google Account permissions page. Local cached mail remains on your Mac until you delete it through the app or remove the local application data from your device.

Boxento Start

Boxento Start is a start-page product. The hosted version may store the account and widget data needed to run the app. Self-hosted deployments are controlled by the operator of that deployment.

Contact

For privacy questions or deletion requests, contact [email protected].