Privacy Policy

Our Commitment to Privacy

At Slimbox, we believe that privacy is a fundamental right. Our open-source email solution is built with privacy at its core, and we're committed to being transparent about how we handle your data.

Google Account Integration

When you use Slimbox with your Google Account:

• We request access to your Gmail data only after receiving your explicit consent
• We access only the necessary Gmail API scopes required for email functionality
• We use secure OAuth 2.0 authentication provided by Google
• You can revoke our access to your Google account at any time through your Google Account settings

Data Collection and Usage

Google Services Data Handling

• Email data is processed in accordance with Google API Services User Data Policy
• We only process and display email data - we don't store copies of your emails
• All data transmission between our service and Google is encrypted using industry-standard protocols
• We maintain limited temporary caches only as necessary for application functionality

Data Protection and Security

• Secure OAuth 2.0 authentication for Google services
• Regular security audits and updates
• Open-source codebase for transparency and community review
• Compliance with Google API Services User Data Policy

Google User Data Handling

Data Access and Usage

• We access the following Google user data: email content, attachments, and metadata through Gmail API
• This data is used exclusively for providing email functionality within Slimbox
• No Google user data is used for advertising or marketing purposes
• We maintain detailed logs of all data access for security and compliance

Data Sharing and Transfer

• Google user data is never shared with third parties except as required for core service functionality
• When necessary, we only work with service providers who comply with Google API Services User Data Policy
• All service providers are bound by strict confidentiality agreements

Data Retention and Deletion

• Email data is processed in real-time and not permanently stored
• Temporary caches are automatically cleared within 24 hours
• All Google user data is permanently deleted when you revoke application access

Limited Use Disclosure

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your Rights and Controls

• Right to revoke access to your Google account at any time
• Right to request deletion of any cached data
• Right to export your data
• Right to lodge complaints about data handling