Access to your mailboxes
We connect through OAuth where the provider supports it, request the narrowest scopes needed to send and read replies, and never store your mailbox password.
Encryption
Data is encrypted in transit with TLS and at rest with AES-256. Tokens are stored in a separate secrets store.
Data minimisation
We do not keep a contact database. Prospect data fetched from providers is kept only as long as a campaign needs it.
Staff access
Production access is limited, logged and reviewed. Support staff see your account only when you grant access.
Reporting a vulnerability
Email support@inboundlabs.app. We acknowledge reports within two working days.
Last updated 14 October 2026.