This Privacy Policy explains how Optiminastic UK Limited ("we", "our", or "us") collects, uses, protects, and discloses your information when you use InboxSpy ("InboxSpy" or "the Service").

1. Information We Collect

A. Google Account and Gmail Data (via OAuth)

When you connect your Gmail account through InboxSpy, we request your explicit consent via Google OAuth. We access only the information required to deliver InboxSpy's analytics features, including:

Email subject lines
Sender and recipient addresses
Message dates and times
Labels and tags
Email snippets (previews)

We do not access, process, or store the body content of private emails or attachments unless strictly necessary for delivering analytics you have requested.

B. Account Profile Information

When you sign up or log in with Google, we collect your name, email address, and Google user ID.

C. Usage Data

We may collect device, browser, IP address, and usage logs to operate and improve the Service and for security monitoring.

2. How We Use Your Information

To provide personalized email analytics and insights as requested by you.
To operate, maintain, secure, and improve the Service.
To respond to your requests, support queries, and account management needs.
To comply with applicable law and to protect the rights, property, or safety of users and our company.

We do not sell, rent, or share your email or profile data with third parties for marketing or advertising purposes.

3. Legal Basis for Processing (UK GDPR)

We process your data only with your explicit consent (as given through the OAuth process), and solely for the purposes stated herein.
You have the right to withdraw your consent at any time by disconnecting your Google account from InboxSpy.

4. How We Protect Your Information

All user data is transmitted and stored using industry-standard encryption and security protocols.
OAuth tokens and other credentials are stored securely and never exposed to unauthorized parties.
Access to user data is restricted to authorized personnel and contractors on a strict need-to-know basis, and subject to confidentiality agreements.
We regularly review our security procedures to maintain data integrity and prevent unauthorized access, disclosure, or loss.

5. Google User Data and API Compliance

InboxSpy's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We access only the minimum Google user data required for InboxSpy's features, and never use your data for advertising or unrelated analytics.

6. Data Retention and Deletion

We retain your email data and analytics only as long as necessary to provide the Service or as required by law.
You may request deletion of your InboxSpy account and all associated data at any time via your account settings or by contacting us at central1@inboxspy.co.uk.
Upon disconnection of your Google account, we will delete all OAuth tokens and cease access to your Gmail data.

7. Your Rights

As a UK resident or user protected by the UK GDPR, you have the right to:

Access the personal data we hold about you
Correct or update your information
Request deletion of your data
Withdraw consent for data processing at any time
File a complaint with the UK Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us at central1@inboxspy.co.uk.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified to you via email or through the InboxSpy platform, with a new effective date. Please review this Policy periodically.

9. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact:

Optiminastic UK Limited

Email: central1@inboxspy.co.uk

Registered Office: 128, City Road, London EC1V 2NX

By using InboxSpy, you confirm that you have read, understood, and agreed to this Privacy Policy.

For more details about your account settings, see Settings.