Plain language, and it binds us.

Who we are

Inbox Cardinal is a product of EDG.tech. It ranks what matters across your connected email accounts and calendars on one scale, so the important thing never hides in the account you check least. Contact: hello@inboxcardinal.com. This policy covers the Inbox Cardinal application at app.inboxcardinal.com and this website.

What we collect

Only what the product needs to do its one job:

• Your Inbox Cardinal account: the email address and name you sign up with.
• Mailbox and calendar content you connect: messages, message headers, and calendar events from each account you individually authorize, accessed read-only through each provider's official interface (Google, Microsoft, or IMAP).
• Connection credentials: the tokens or app passwords needed to keep each connection alive. They are stored encrypted, are never written to logs, and are revocable by you at any time.
• Operational records: technical logs needed to run the service reliably. Logs never contain message bodies or credentials, and are retained for 30 days.

How we use it

Your content is used to rank your priorities for you. That is the entire use. Concretely, the service:

• computes an importance score for each message, with a visible breakdown of why;
• builds your ranked feed and daily brief;
• detects scheduling conflicts across your calendars;
• alerts you when something important would otherwise be missed.

Scoring is automated. Some of it uses AI models running inside our cloud environment under agreements that prohibit using your data to train models. We never train AI models on your email or calendar content. This is a hard commitment, not a settings toggle. Humans do not browse your mail; the narrow exceptions are the ones every serious service has: with your explicit consent for a support issue, for security and abuse investigation, or where the law requires it.

Google user data

When you connect a Google account, you individually consent to read-only access: gmail.readonly to read messages for scoring, calendar.readonly to read events for conflict detection and the daily brief, and basic profile information to identify which account you connected. Inbox Cardinal never sends, modifies, deletes, or labels your mail, and never creates, edits, or deletes calendar events.

Inbox Cardinal's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular: Google user data is used only to provide the ranking, brief, conflict, and alert features you see; it is never sold, never used for advertising, never used to train AI models, and never read by humans outside the narrow exceptions above. Revoking access, in the app or at myaccount.google.com/permissions, stops all access, and disconnecting the account purges its data from our systems.

Microsoft and IMAP accounts

The same commitments apply to every connected account. Microsoft accounts connect through delegated, per-account consent with read-only access. IMAP mailboxes connect with an app password you provide, stored encrypted, used read-only, and revocable by you at any time. We never request organization-wide access to anyone's mail.

Storage and security

Everything is encrypted in transit and at rest. Connection credentials are additionally envelope-encrypted with managed keys and are never stored or transmitted in plaintext. Your content flows directly between your providers and Inbox Cardinal, with no third-party email middleman. The service runs on a major cloud infrastructure provider that processes data on our behalf under contractual confidentiality and security obligations; we do not share your data with anyone else.

Sharing

We do not sell your data. We do not share it for advertising. We do not give it to data brokers. Beyond the infrastructure provider above, data leaves our systems only if you direct it to (for example, an alert delivered to your device) or where the law compels it.

Retention and deletion

Disconnect means delete. Removing a connected account purges that account's messages, events, scores, and credentials from our systems. Deleting your Inbox Cardinal account removes your data entirely. Operational logs age out on their 30-day schedule.

Your rights

You can see what is connected, disconnect any account, and delete your account from within the app at any time. For access, correction, or deletion requests you cannot complete in the app, email hello@inboxcardinal.com and we will handle it promptly.

This website

No cookies, no trackers, no analytics that identify you. The site uses a cookieless page counter that stores no personal data. Inbox Cardinal is not directed at children under 16, and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will say so plainly on this page and update the date at the top. We will not quietly weaken a commitment. Questions, including hard ones, are welcome at hello@inboxcardinal.com.