Privacy policy

We operate Inbox Watch. This policy describes the product as it is built today.

Data we collect

• Account email, when you request a magic link.
• A hashed session cookie after you sign in.
• Encrypted Instantly or Smartlead API keys, if you connect one, and the mailbox addresses those APIs return.
• Sent, bounce, and reply totals for monitored mailboxes, DNS reports for domains you watch, alerts, and Monday reports.
• Stripe customer and subscription identifiers. Card data stays with Stripe.

Public checker

A check from the marketing site queries DNS and RDAP and renders the result. We do not create an account from it and we do not store the report. The rate limit is kept in memory on the server.

Why we use it

To sign you in, to run the checks you asked for, to email alerts and the Monday note, and to bill the plan you chose. Transactional email goes through the provider configured on the server (Resend, when a key is set).

How long

Account data stays until you ask for it to be deleted or we close the account. Disconnecting a sending tool deletes that key. A domain you added by hand is deleted when you stop watching it, unless mailboxes from an API still point at it.

Analytics

We use Google Analytics to measure site traffic. It sets cookies and collects anonymized usage data, such as the pages you open and a general location. Read Google's privacy policy. To opt out, install the Google Analytics opt-out add-on.

Sharing

We send data to the infrastructure that runs the product: the host (Render), Postgres, Stripe, the email provider, Google Analytics, and the Instantly or Smartlead API you connected. We do not sell personal information.

Contact

To reach us about this policy, sign in. We reply to the email address on the account. Inbox Watch is based in Dallas, TX.