Privacy Policy

Welcome to Sendox. We value your privacy and the security of your data. This Privacy Policy describes how Sendox ("we", "us", or "our") collects, uses, stores, and shares information when you use our SaaS messaging platform and related services, including features that integrate with Google Workspace services.

By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, your choice is not to use our services.

Email content including the inquiry text, generated reply, subject line, and recipient address is retained only as necessary to provide your visible reply history and in-reply context. This content is kept for a limited period of 30 days by default, after which it is automatically and permanently deleted from our production database. The reply record itself such as date, tone, language, and length remains in your history as a usage record and does not contain the email content.

You can delete an individual reply or your entire personal reply history at any time from the History page. When you delete this content, it is removed from the production database and is no longer available through your account.

Gmail add-on handoff data is short-lived by design. A copy of the conversation you explicitly hand over when requesting a reply is retained for up to one hour and is used only to complete that handoff, whether or not you send the reply. It is deleted when the one-hour window expires through scheduled cleanup, or earlier when the reply is sent. The message text is removed from the handoff record as soon as the reply is sent.

Previous email content is not carried into later generations. Each AI generation uses only the email you are replying to at that time, together with the reply settings you select. Sendox does not automatically include conversations you previously handed over or email content you previously pasted in a later request.

We do not sell your personal data. We may share information with selected third parties where necessary to provide, operate, secure, or support Sendox, including:

• Third-party AI service providers: When you request an AI-generated reply, Sendox sends the message content needed for that request to the appropriate AI provider: manually entered content is sent to NVIDIA, while Gmail-derived content for Business users is sent to Z.AI. The transfer is encrypted, and Sendox sends only the content and reply settings needed for the requested feature. It does not send your Gmail address, message or thread IDs, OAuth tokens, email attachments, or other mailbox conversations. Sendox does not use Google Workspace or Gmail data for advertising or to train or improve generalized AI models.
• Business partners, suppliers, and service providers: We may share information with service providers where necessary to provide services such as hosting, payment processing, infrastructure, security, customer support, or other services required to operate Sendox. These providers receive only the information necessary for the service they provide.
• Analytics providers: We use analytics services to understand usage of and improve our public website and product experience. These analytics services operate on designated Sendox pages and are not provided with Gmail email content.

Sendox's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google Workspace and Gmail data is used only to provide the user-facing features for which you grant access, including generating and sending the reply you request. We do not use Google user data for any unrelated purpose.

We do not sell Google user data. We do not transfer or use Google user data for advertising, retargeting, personalized or interest-based advertising, or to determine credit-worthiness or for lending purposes.

We do not use Google Workspace or Gmail data to create, train, or improve generalized AI or machine-learning models. For Business users, Gmail content is sent to Z.AI only when needed to provide the reply-generation feature you request. This transfer occurs only after you give the required consent.

Your consent. Before Sendox sends Gmail content to the AI provider for the first time, you are shown what will be sent, to whom, and why. You must explicitly accept before any Gmail content is transferred. If the AI provider or the disclosure changes, you are asked to consent again.

Which Google permissions Sendox asks for. The Sendox website requests permission to send email on your behalf, together with basic sign-in information used to identify your connected mailbox. It does not request permission to read your mailbox. The Gmail add-on separately requests permission to act on the conversation you have open, allowing you to hand that specific conversation to Sendox when you choose to do so.

What is not sent to the AI provider. Sendox does not send your Google OAuth tokens or other credentials, your Gmail account address or account identifier, Gmail message or thread identifiers, or email attachments to the AI provider. Attachments are not read or transmitted by Sendox for reply generation; Sendox processes the message content required for the requested feature.

Human access. Sendox does not permit employees or other personnel to read your Google user data unless you have provided explicit consent to access specific data, or access is necessary for security purposes or to comply with applicable law or legal requirements.

We use technical and organizational measures designed to protect Google user data and other personal information against unauthorized access, use, alteration, disclosure, or loss.

These measures include:

• Encryption in transit: Data transmitted between Sendox, Google services, and our service infrastructure is protected using HTTPS and modern transport encryption.
• Protection of credentials: Google OAuth credentials and other sensitive authentication data are protected and are never included in requests to third-party AI providers. OAuth tokens are encrypted at rest.
• Access controls: Access to user data and internal systems is restricted to authorized services and personnel based on operational need.
• Data minimization: Sendox processes only the Google user data necessary to provide the Gmail-related features requested by the user.
• Prompt-injection protection: Gmail content received through Google APIs is treated as untrusted data and is separated from Sendox's application instructions when processed by AI systems.
• Data retention and deletion: Google user data and generated email content are retained only for the periods described in this Privacy Policy and are deleted when those periods expire or when deletion is requested, where applicable.

We regularly review our security practices and take reasonable steps to address identified security risks.