Privacy Policy

Who we are

Sharebox is a tool that turns Google Groups into shared inboxes your team can manage directly inside Gmail.

Information we collect

• Account information: name, email address, organisation details, and authentication identifiers from your sign-in provider.
• Workspace configuration: Google Groups you connect, members, and settings required to enable shared inbox workflows.
• Gmail data (for connected shareboxes): message metadata such as sender, subject, date, snippet, and message identifiers. Where necessary to provide functionality you request, Sharebox may temporarily access message content for group addresses you configure (for example, to display message previews). This access is limited, scoped to the authorised account, and never used for advertising.
• Product usage: app interactions, device/browser information, and diagnostics used to improve reliability and user experience.

Google user data

When you connect Sharebox to Google Workspace, we use Google APIs to perform only the actions needed to provide shared inbox features. Depending on your setup, this may include limited Gmail and Google Workspace Directory scopes (for example: Gmail read access for messages sent to specific group addresses you connect, and read-only Directory scopes to list users and group members). We do not use Google data for advertising.

Sharebox’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

• Provide and maintain Sharebox services and features.
• Enable shared inbox workflows like assignment and status.
• Secure accounts, detect abuse, and troubleshoot issues.
• Improve product performance and user experience.
• Communicate important updates, security alerts, and support information.

Data storage and retention

We store the minimum data required to power shared inbox features and keep it only as long as necessary for those purposes or as required by law. Assignment and state data for messages is stored in Sharebox; Gmail messages remain in your Google account.

Sharebox uses Supabase as its secure cloud database provider. Data processed via Supabase is encrypted at rest and in transit, and stored in EU or US data centres depending on user region.

Analytics and session replay

We use Amplitude for product analytics and may enable session replay sampling to improve usability and diagnose issues. This may capture in-app interactions and device/browser technical details. You can contact us to opt out of session replay for your workspace.

Security

We use industry-standard security practices to protect data in transit and at rest. Access to production systems is restricted and audited. Credentials and API keys are stored securely.

Your choices and rights

• Access, correction, deletion: contact us to request access, updates, or deletion of your personal information.
• Google access: you can revoke Sharebox’s access in the Google Admin Console (for domain-wide delegation) and via your Google account’s security settings.
• Analytics/session replay: reach out if you want to disable session replay for your workspace.

Data processors and transfers

We may use trusted sub-processors (such as cloud hosting, databases, analytics, and email delivery) to provide the service. Where data is transferred internationally, we rely on appropriate safeguards permitted by applicable law.

Children

Sharebox is not directed to individuals under 16. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date and, where appropriate, provide additional notice.

Contact

Questions about this policy or your data? Email us at support@getsharebox.io.