Privacy Policy

1. Who We Are

InboxSafe is a product of Cyber Global Technologies LLC ("CGT", "we", "us", or "our"), a cybersecurity company based in New York. You can contact us at privacy@cyberglobal.ai.

2. What We Collect

We collect only what is necessary to provide and improve InboxSafe:

• Account information — your email address and name when you create an account.
• Usage data — anonymized statistics such as number of threats detected, extension version, and browser type. No email content is included.
• Payment information — processed by Stripe. We never see or store your credit card details.
• Support communications — if you contact us, we retain those messages to help resolve your issue.

3. What We Do NOT Collect

We want to be explicit about this:

• We do not store the content of your emails after a scan verdict is returned.
• We do not use scanned message content to train AI models — per Anthropic's commercial API terms, submitted data is not used for training by default.
• We do not sell your data to third parties.
• We do not use your data for advertising purposes.
• We do not build behavioral profiles from your inbox activity.

4. How InboxSafe Works

When you scan a message, the InboxSafe Chrome extension sends the sender, subject, and the first 1,000 characters of the message body — along with any URL you're checking — to our backend API (api.inboxsafe.app) over an encrypted connection. Our backend forwards that content to Anthropic's Claude API, which returns a phishing risk verdict (a risk level, score, and plain-English reasons). This content is not processed locally in your browser, and it is not stored by InboxSafe or Anthropic after the verdict is returned to you.

5. How We Use Your Information

• To provide and maintain the InboxSafe service
• To authenticate your account and manage your subscription
• To send you service-related communications (security alerts, billing, product updates)
• To improve detection accuracy using anonymized, aggregated threat data

6. Data Sharing

We share data only with the following trusted service providers, strictly for operating InboxSafe:

• Anthropic — AI-based phishing analysis (sender, subject, and message body you scan)
• Stripe — payment processing
• Clerk — authentication and user management
• Cloudflare — infrastructure and DDoS protection

We do not sell, rent, or share your personal data with any other third parties.

7. Data Retention

Scanned message content (sender, subject, body) is not retained — it is used only to generate your verdict and is discarded immediately afterward; neither InboxSafe nor Anthropic stores it. We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability

To exercise any of these rights, contact us at privacy@cyberglobal.ai.

9. Security

We apply industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls. As a cybersecurity company, security is not an afterthought — it's what we do.

10. Children's Privacy

InboxSafe is not directed at children under 13. We do not knowingly collect personal data from children under 13.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or a notice in the extension. Continued use of InboxSafe after changes constitutes acceptance of the updated policy.

12. Contact

Questions about this policy? Contact us at privacy@cyberglobal.ai or write to:

Cyber Global Technologies LLC
New York, NY, United States