Mailbox Steward Privacy Policy

Introduction

This Privacy Policy applies only to Mailbox Steward, a Chrome extension that helps you review and clean up Gmail messages with local recipes, dry runs, manual approval, audit history, and undo.

This page is hosted on LinkRank.ai so Chrome Web Store reviewers and users have a direct public privacy policy URL for Mailbox Steward.

Data Mailbox Steward Handles

Mailbox Steward handles Gmail and extension data only when you use the extension:

• Google OAuth access tokens provided through Chrome Identity so the extension can call the Gmail API for your signed-in Google account.
• Gmail message data needed for cleanup previews and approved actions, including message IDs, thread IDs, sender names and email addresses, subjects, snippets, dates, labels, size estimates, and message body content when you open a message preview.
• Gmail labels and Gmail search results needed to build dry runs and execute approved cleanup actions.
• Extension settings, protected senders and words, recipe preferences, notification preferences, dry-run drafts, approvals, audit history, rollback data, and audit exports you choose to download.

How Mailbox Steward Uses Data

Mailbox Steward uses this data to:

• Search Gmail and build preview lists before any mailbox change.
• Label, archive, move messages to Trash, untrash messages during undo, and create labels only when you approve those actions.
• Show cleanup suggestions, candidate previews, safety protections, audit history, and undo options.
• Remember your settings and recipe preferences on your device.
• Send optional Chrome notifications for reminders and cleanup completion alerts.

Storage and Transfers

• Gmail data is requested from Google APIs over HTTPS.
• Gmail OAuth tokens are managed by Chrome Identity and Google's OAuth systems.
• Settings and recipes are stored in chrome.storage.local.
• Audit history and rollback records are stored locally in IndexedDB in your browser profile.
• During local browser development only, storage fallbacks may use localStorage.
• The Chrome Web Store version of Mailbox Steward does not send Gmail content, message previews, OAuth tokens, audit history, or rollback data to LinkRank.ai servers or any developer-operated backend.

Sharing

Mailbox Steward does not sell, rent, or share user data with advertisers, data brokers, analytics providers, or AI/model providers.

Gmail data is sent only between the extension and Google APIs as necessary to provide the Gmail cleanup features you request. Information may be disclosed only if required by law or to protect against security abuse, and only to the extent required.

Google API Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Mailbox Steward uses Google API data only to provide or improve its Gmail cleanup features. The extension does not use Google API data for advertising, creditworthiness decisions, data brokerage, or unrelated purposes.

Permissions

Mailbox Steward requests these Chrome extension permissions:

• identity: Connect to Gmail through Google OAuth.
• storage: Save local settings and recipes.
• alarms: Support scheduled recipe reminders.
• notifications: Show optional reminder and completion alerts.
• https://gmail.googleapis.com/*: Call the Gmail API for previews and approved cleanup actions.

Mailbox Steward uses the Gmail OAuth scope https://www.googleapis.com/auth/gmail.modify so it can read message metadata and content needed for previews, apply or remove labels, archive messages, move messages to Trash, and untrash messages for undo. The extension does not permanently delete Gmail messages.

User Controls

You control when Mailbox Steward connects to Gmail and when it changes messages. Cleanup actions require a dry-run preview and manual approval before execution.

You can disconnect Gmail in Settings to revoke the extension's cached access token. You can also remove Mailbox Steward from Chrome to delete extension-local settings, recipes, audit history, and rollback records stored by the extension.

Security

Mailbox Steward uses HTTPS for Gmail API requests. The Chrome Web Store version does not store Gmail data on a developer-operated backend, does not use service account keys, and does not ask for your Gmail password.

Changes to This Policy

This policy may be updated when Mailbox Steward changes how it handles data. Updates will be published on this page with a new Last Updated date.

Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: support@linkrank.ai