Last updated: 10 August 2026
Intelbox (“Intelbox”, “we”, “us”) is a lightweight customer-relationship-management (CRM) tool that works inside Gmail. This policy explains what information we access and store, why, how we protect it, and the choices you have. It applies to the Intelbox browser extension, the Intelbox web and mobile apps, and our backend services.
Intelbox is currently invite-only. You can only use it if we have added your email address to our allowlist.
Contacts, deals/tickets, pipeline configuration, notes, tasks, and any other content you create in Intelbox. This is stored in our database so the app can function.
When you sign in with Google, you grant Intelbox access to the following, which we use only to provide the features described:
openid, userinfo.email, userinfo.profile) — to identify you and create your account.gmail.readonly) — we read message metadata (sender, recipients, subject, date, labels, snippet) to surface your relevant email inside the CRM. We read the full body of a message only for email threads you explicitly link to a shared pipeline ticket, so that teammates you have shared that ticket with can read the conversation. We never send, modify, label, or delete your email.calendar) — to create and manage events you schedule from within Intelbox (kept in a dedicated “Intelbox” calendar) and to read your events so we can warn you about scheduling conflicts.We request the minimum access needed for these features and do not use Google user data for advertising.
Standard server logs (such as IP address and request metadata) needed to operate and secure the service.
Intelbox offers an optional open-tracking feature. If you enable tracking on an email you send, Intelbox embeds a small (1×1 pixel) image in that message. When the recipient’s email client loads that image, we record that the message was opened, along with the time, the requesting IP address, and the user-agent string, and show this to you (the sender). Tracking is off by default for new emails and can be turned off per message. If you do not want to use this feature, simply leave it disabled.
We do not sell your data, and we do not use it for advertising. We share it only with service providers that help us run Intelbox, and only as needed:
We may also disclose information if required by law, or to protect the rights, safety, and security of Intelbox and its users.
Intelbox’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or sell Google user data to third parties, use it for advertising, or allow humans to read it except where you explicitly share it with a teammate, where required for security or to comply with the law, or where you have given us consent.
Your data is stored in our PostgreSQL database hosted on Railway. All traffic between the apps and our servers is encrypted in transit using HTTPS/TLS, and access to production data is restricted. Data may be processed on servers located outside your country. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
We retain your information for as long as your account is active or as needed to provide the service. You can:
Intelbox is a business tool intended for adults and is not directed to children. We do not knowingly collect information from anyone under 16.
We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you.
Questions about this policy or your data? Email intelbox.io@gmail.com.