Skip to main content

Privacy & Security

We built Focus Box to be the product we'd trust with our own inbox. Here's exactly how your data is handled.

Google CASA Tier 2 Security Assessment

Focus Box passed the Google CASA Tier 2 security assessment for applications requesting Gmail access. The assessment reviews how apps protect user data, handle OAuth access, and maintain secure data practices.

  • No email content stored
  • OAuth tokens encrypted at rest
  • Scoped Gmail access only
  • Disconnect and delete anytime
ESOF security assessment shield

The Short Version

  • ✓We request read/manage access to your inbox only — never contacts, calendar, or other apps
  • ✓We store encrypted tokens and each provider's unique email ID so processed emails are not reclassified
  • ✓Your data is encrypted at rest and in transit (TLS)
  • ✓Only AI models process your emails—no humans at Focus Box read your mail
  • ✓We never sell or share your data with third parties
  • ✓Delete your account anytime; your data is removed immediately

What We Access

Focus Box requests read and manage access for your primary inbox. We use this to classify incoming emails and apply Labels (Gmail) or Categories (Outlook). We never access your Contacts, Calendar, Drive, or any other third-party service.

GmailMicrosoft Outlook

What We Store

Encrypted Tokens: We store refresh/access tokens so you do not have to reconnect every session.
Provider Message IDs: We store only each provider's unique email ID so Focus Box can skip emails it has already classified.
No Email Content Stored: We do not retain sender, subject, or body content after processing. A portion of the body is sent to an AI model for classification and summarization, then immediately discarded.

How We Protect Your Data

Access tokens are encrypted at rest. Your database records are isolated by user ID—no query can accidentally return another user's data. All connections use TLS in transit.

Who Sees Your Data

Sender, subject, and a portion of email body text are processed transiently by an AI model for classification and summarization. That content is not stored after processing. No humans at Focus Box review your emails. We do not sell or share your data with third parties.

Payments

Payments are handled by Lemon Squeezy. Focus Box never sees or stores your card details. Your billing history is available in the Lemon Squeezy customer portal.

Data Deletion

You can delete your account at any time. Deleting your account removes your Gmail or Microsoft tokens, stored provider message IDs, and your subscription record. Deletion is permanent and immediate.

For complete legal details, see our Privacy Policy and Terms of Service.