Privacy Policy

Last Updated: August 2026

SpamBox ("we", "our", or "us") respects your privacy. This Privacy Policy explains how we access, process, and protect your information when you use SpamBox.

1. Google OAuth 2.0 & Gmail API Access Disclosure

When you sign in using Google, SpamBox requests your permission to access your Gmail account using Google's OAuth 2.0 authentication protocol and official Gmail APIs. SpamBox requests the following specific OAuth 2.0 scopes:

Gmail Read Access (https://www.googleapis.com/auth/gmail.readonly): Used exclusively to retrieve email messages (headers and content) when you open the application to display your inbox messages, evaluate spam/phishing probability, and generate email thread summaries upon your request.
Gmail Send Access (https://www.googleapis.com/auth/gmail.send): Used solely to send AI-generated email responses directly through the Gmail API when you explicitly click the Send button inside the application.

2. How We Use Your Gmail Data

SpamBox uses retrieved Gmail messages only to provide the following core features:

Spam and Ham email classification.
Email summarization.
AI-assisted email reply generation and user-initiated email sending.

Your Gmail data is accessed and processed only after you explicitly authorize access via Google OAuth.

3. Temporary Processing & Non-Retention

SpamBox does not permanently store the contents of your Gmail messages in SQL, NoSQL, or any other database. Your email data is processed ephemerally in active memory during your session and is discarded after processing is complete. We do not use your Gmail data for advertising, marketing, user profiling, or any purpose unrelated to the services requested by the user. Your data is never sold or shared with third parties.

4. Email Sending

If you choose to send an AI-generated reply through SpamBox, we securely dispatch the email through the Gmail API using your authorized Google OAuth token. Emails are sent only after you explicitly initiate and confirm the send action. You retain full control and responsibility over all sent emails.

5. Data Security

We use Google's secure OAuth authentication process and TLS encryption during data transmission to protect user information against unauthorized access.

6. User Control & Access Revocation

You may revoke SpamBox's access to your Google Account at any time by visiting:

https://myaccount.google.com/permissions

7. Changes to this Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated revision date.

8. Contact Us

For any questions regarding this Privacy Policy or SpamBox's security practices, contact us at:

Email: srinivasjayesh04v2@gmail.com
Repository: GitHub - SpamBox Project