Privacy Policy

What we collect

We store account details, inbox configuration, API and webhook metadata, service logs, and inbound email content needed to provide the service. Inbound data can include envelope and header fields, subject, text and HTML bodies, extracted one-time passcodes, and the original raw message bytes.

To understand which channels work, on your first visit we set a single first-party cookie (kept for 30 days) recording the referring site (host name only), any campaign tag from the link you arrived through, the first page you landed on, and when. If you sign up, those values are stored with your account. We use no third-party trackers or advertising cookies.

Why and how long

We process this data to receive, parse, secure, and deliver email through the API. A scheduled purge permanently deletes committed messages from the live database after the applicable plan window: 1 day for Free accounts and 7 days for Pro accounts (longer on higher tiers, as listed on the pricing page). Database backups may retain deleted messages for up to 14 days, and undelivered mail may remain in the mail queue for up to 5 days, before final deletion. Operational and account records may be kept longer where needed for security, billing, legal obligations, or dispute handling.

Location and service providers

The service and its PostgreSQL data are hosted on Hetzner infrastructure in Germany, in the European Union. We may use limited providers needed for hosting, DNS, email delivery, and service operations, subject to appropriate safeguards.

Your choices

You may request access, correction, or deletion of your account data, subject to legal and security requirements. Contact abuse@inboxpipe.net; until a separate privacy mailbox is configured, this monitored address also handles privacy requests.

Security and contact

We use access controls, encryption in transit, and data-minimization measures, but no online service can guarantee absolute security. Report privacy or abuse concerns to abuse@inboxpipe.net.