This Privacy Policy explains how Kingmaker Analytics LLC (“Company,” “Operator”) collects, uses, discloses, stores, and deletes personal data in connection with Inbox Maid when users use the desktop application, purchase a license, or interact with the website or support channels.
1. Scope
This Privacy Policy applies to personal data processed through the Service, including information obtained from Google APIs and Gmail when the user authorizes mailbox access.
Desktop application: Inbox Maid for Windows is local-first. Gmail OAuth credentials, OpenAI API keys, preferences, and run history are stored on the user’s device. Model requests are sent directly from the device to OpenAI using the user’s own API key. The Operator does not operate centralized mailbox hosting or LLM proxying.
2. Categories of data collected
Depending on how the Service is used, the Company may process:
- License and entitlement data — license keys, device identifiers, activation status
- Purchase data from checkout — purchaser email, order identifiers (processed by Lemon Squeezy or another payment processor)
- Gmail data authorized by the user — message content and metadata via Google Gmail API from the user’s device
- User configuration data — triage settings, label preferences, privacy settings (stored locally)
- Operational metadata — run timestamps, action counts (stored locally; capped at 50 recent runs)
- Credentials — OpenAI API keys and Gmail OAuth tokens (Windows secure storage)
- Support communications — email and contact form submissions
The desktop app does not collect Operator-hosted login accounts or in-app usage analytics in the current release.
2a. Website and contact forms
When you visit inboxmaid.com, the Operator may process:
- Contact and early-access form submissions — name, email, topic, and message (processed via Web3Forms when enabled)
- Standard server logs — IP address, browser type, and request metadata (typically retained by the hosting provider)
The website does not currently use first-party analytics, advertising pixels, or marketing cookies. If that changes, this policy will be updated before or when those tools are enabled.
Third-party services used by the website may set their own cookies or process data under their policies — including Web3Forms (contact forms) and Lemon Squeezy (checkout, when enabled). See our Cookies Policy for details.
3. How data is used
The Company uses personal data to provide inbox features, authenticate licenses, process payments, provide support, prevent fraud, and comply with legal obligations.
The Company does not sell personal data. The Company does not use Google Workspace API data for advertising or to train generalized AI models.
4. Google API and Gmail disclosures
| Permission | Typical use |
|---|---|
Gmail read (gmail.readonly) | Fetch messages for preview and read-only review |
Gmail modify (gmail.modify) | Apply labels and move messages to Trash when user enables live apply |
The Service adheres to the Google API Services User Data Policy, including Limited Use requirements.
5. Sharing of personal data
Personal data may be processed by Google (Gmail API), OpenAI (user-directed LLM requests), Lemon Squeezy (licensing and checkout), and Web3Forms for contact form delivery. The Company does not share Google-derived user data with data brokers or advertising platforms.
6. Data retention
Local app data is retained until the user deletes it via Delete local data in Settings. Payment processor retains purchase records per its policies. Support messages are retained as needed to resolve requests.
7. User controls and deletion
Users may disconnect Google access, export a diagnostic bundle, and request deletion of Operator-held data via support@kingmakeranalytics.com or the contact form.
8. Texas and U.S. state privacy notice
Kingmaker Analytics LLC is a Texas company. The Company does not sell personal data.
California residents: You may request access to, deletion of, or correction of personal data the Operator holds about you, and you may ask whether personal data was sold or shared (we do not sell personal data). Submit requests to support@kingmakeranalytics.com with subject line “Privacy request.”
Texas residents: Privacy requests: support@kingmakeranalytics.com.
9. Children and eligibility
The Service is not directed to individuals under 18. Use of the Service requires you to be at least 18 years old, consistent with our Terms of Use. We do not knowingly collect personal data from anyone under 18.
10. International users (GDPR and UK GDPR)
If you are in the EEA or UK, you have rights under the GDPR and UK GDPR — including access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent or complain to a supervisory authority. We rely on contract, consent, legitimate interests, and legal obligation as our lawful bases. Because Inbox Maid is local-first, most personal data stays on your device and never reaches us. See About GDPR for details and Data Processing & Sub-processors for the providers involved and international transfer safeguards.
11. Changes
Material changes will be communicated by reasonable means with an updated effective date.
12. Contact
Kingmaker Analytics LLC (United States)
support@kingmakeranalytics.com
Contact form
For data requests or formal legal notices, contact us by email and we will provide any further details required to process your request.