Read-only permission
InboxUnion requests the Gmail read-only scope. It can read authorized messages and metadata, but cannot send, edit, archive, label, or delete mail. It never asks for or stores your Google password.
Official OAuth authorization
Account access is granted on Google's authorization screen. Each connected account receives independent credentials, so you can disconnect one without affecting the others.
Credential protection
- OAuth credentials are encrypted at rest.
- Application API keys are stored as cryptographic hashes, not raw keys.
- Application routes require authentication.
- Cloud Pub/Sub access is assigned to a dedicated service account with only the subscriber role needed for notification delivery.
Data minimization
InboxUnion keeps the message and thread data needed for a unified inbox and search. During normal synchronization, it records attachment metadata but does not download attachment bodies. Mailbox updates use Gmail history and push notifications to avoid unnecessary full reads.
Operator responsibilities
InboxUnion is self-hosted. Its safety therefore also depends on the operator securing the machine, database, encryption secret, environment file, Google service-account key, backups, and access network. Secrets should never be committed to source control or exposed by a public web server.
Reporting a security concern
Please report a suspected vulnerability or data incident to support@inboxunion.site. Include a clear description and safe reproduction steps, but do not include passwords, OAuth tokens, message contents, or other sensitive data.
Related information
Read the Privacy Policy for the complete data-use disclosure and the Data Deletion Instructions to remove a connected account.