Privacy Policy
Effective: October 17, 2026
Unbury sorts your Gmail inbox using the headers of your messages: who sent them, the subject line, and similar technical details. We never read the body of your email. We use your data only to run Unbury for you, we never sell it, and you can export or delete it at any time.
Who we are
Unbury ("Unbury", "we", "us") is an email organization service for Gmail operated by Leverage Works Studios LLC, a Delaware limited liability company. This policy covers the Unbury website at unburyinbox.com, the Unbury web app, and the Unbury add-on for Gmail.
What we access in your Google account, and why
You sign in with Google and choose to grant Unbury access to your Gmail account. We request only the permissions the features below need:
Read and organize your mail (gmail.modify)
To read message headers so we can categorize new mail; to create Unbury labels and apply them; to archive, mark as read, or move to trash when you set a rule that does so; and to send email from your account only when you ask us to, such as an unsubscribe request to a sender that only accepts unsubscribes by email.
Manage Gmail filters (gmail.settings.basic)
To create, show, and remove the Gmail filters you set up through Unbury, so your rules keep working inside Gmail itself.
Your basic profile (email and profile)
Your name, email address, and Google account ID, to create your Unbury account and keep it linked to the right mailbox.
The Gmail add-on
When you open the Unbury add-on inside Gmail, it reads the message you have open so it can show and change that message's category. It sends us the message ID, never the message content.
What we read from your email, and what we never read
To categorize a message we read its headers: the sender name and address, recipients, subject line, date, mailing-list and unsubscribe headers, and authentication results such as SPF, DKIM, and DMARC. We also note whether a message has attachments and what type they are (for example a PDF or a calendar invite), but not their names or contents.
We never read, store, or analyze the body of your email, its preview text, or the contents of attachments.
Other information we collect
Your settings and corrections
The categories, rules, and labels you create, and the corrections you make when Unbury files a message in the wrong place.
Billing
If you subscribe, payment is handled by Stripe. We receive your subscription status, never your card number.
Website analytics
If you accept analytics cookies, Google Analytics records how the website is used. Analytics stays off until you accept, and you can change your choice on this page at any time.
Service records
Technical records of what Unbury did and when, such as which category it chose and how confident it was, used for security, troubleshooting, and showing you your activity history. These records contain no email content.
How we use your data
We use the data above only to provide Unbury to you and to improve the features you use: categorizing your mail, applying your rules, learning from your own corrections, showing your activity and summaries, sending you the service emails you have turned on, billing, security, and support you ask for.
We do not sell your data. We do not use it for advertising. We do not use data from your Google account to develop, improve, or train generalized artificial intelligence or machine learning models.
How we use AI
Most mail is categorized by rules: your own rules and patterns learned from your own corrections. When those cannot decide, we ask an AI model. The model receives only the sender name and address, the subject line, the sender's domain, authentication results, and whether the message has attachments and of what type. It never receives the message body or attachment names.
The model runs at Google (Gemini), reached through the Lovable AI gateway, our hosting provider. If you add your own OpenRouter key in settings, requests go to the model you choose through OpenRouter under your own account. When we use OpenRouter, we instruct it to route only to providers that do not store or train on the request.
We use these providers only to return a category to us, never to train models on your data. Unbury itself keeps the result (the category and confidence), not the text we sent. Lovable keeps a copy of each AI request and its response for 90 days so it can debug the AI gateway, and then deletes it.
Community learning (off unless you turn it on)
Community learning is off by default. If you turn it on in settings, your corrections can help categorize mail for other Unbury users. What is shared is a one-way fingerprint (hash) of the sender's address and the category you chose, never the subject, your address, or anything you wrote. A sender's category is shared only after several different users have independently agreed on it. You can turn community learning off at any time; your contributions then stop being used, and they are deleted when you delete your account.
Who at Unbury can see your data
Nobody at Unbury reads your email metadata as part of running or improving the service. A person on our team would look at specific data from your account only if you ask us to for support and give your permission, if it is needed to investigate abuse or a security incident, or if the law requires it.
How we protect your data
All connections to Unbury use TLS. Email subjects and the sender names and addresses we store are encrypted with AES-256-GCM using a key unique to your account, and your Google access tokens are encrypted the same way. Those keys are themselves encrypted with a master key held by our servers, so that the service can process your mail while you are not signed in. Encryption keys are rotated every 90 days.
How long we keep data
Categorization history
Deleted after 90 days.
AI decision records
The category, confidence, and model used, without any email text: deleted after 365 days.
Your settings, rules, and learned preferences
Kept while your account exists.
When you delete your account
We revoke Unbury's access to your Google account, destroy your encryption keys so anything encrypted for you becomes permanently unreadable, and delete your data. We keep a security audit record of actions taken, with your account identifiers removed, and records the law requires us to keep, such as billing and consent records.
Inactive accounts
If you never connect a mailbox and your trial ends, we delete your account after six months of inactivity, and we email you before we do.
Your rights and choices
Export
Download a copy of your data from Settings > Profile & Security at any time.
Delete
Delete your account from Settings > Profile & Security.
Revoke Google access
Remove Unbury from your Google account at myaccount.google.com/permissions at any time. Unbury stops working on your mailbox immediately.
Community learning
Turn it on or off in Settings.
Emails and cookies
Turn summary emails off in Settings, unsubscribe from any other Unbury email with the link it contains, and change your cookie choice on this page.
Ask us
Write to privacy@unburyinbox.com to access, correct, or delete your data, or to ask anything about this policy. We answer within 30 days.
Google API Services User Data Policy
Unbury's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Children
Unbury is not intended for children under 13, and we do not knowingly collect their data.
Changes to this policy
If we change this policy, we will post the new version here with a new effective date. If a change affects how we use data from your Google account, we will tell you by email before it takes effect.
Leverage Works Studios LLC, privacy@unburyinbox.com