Privacy
What we collect, and what we don’t.
This notice covers this website and the enquiry form on it. What Inbox Steward reads once a mailbox is actually connected is a separate matter, set out in writing before you authorize anything — see the service itself below.
Who is responsible
Inbox Steward is operated by Bulletproof Automations, of Jacksonville, Florida, which is the data controller for the information described here. For anything on this page — including any request under the rights set out below — write to [email protected] and it will reach the right person.
What this website collects on its own
Almost nothing. This site sets no cookies, runs no analytics or tracking, and stores nothing in your browser. The fonts are served from this domain rather than a font network, so loading the page does not disclose your visit to a font provider.
Our hosting provider, Cloudflare, processes standard server request data such as your IP address in order to serve the page and protect the site from abuse. The enquiry form also uses Cloudflare Turnstile to distinguish real submissions from automated spam. That is a technical necessity of running a public form, and it is not used by us to build a profile of you.
What the enquiry form collects
When you submit the form, you send us:
- First and last name
- So we can address you properly when we reply.
- Email address
- So we can reply at all. This is the only field we act on.
- Approximate mailbox size
- A single range, chosen from a list. It tells us roughly what an assessment would involve before we quote you.
- Your role
- Optional, and blank is fine. It helps us pitch the reply.
- Which of the two paths you asked for
- An assessment, or a pilot conversation.
Alongside those, the submission records the time it arrived and the country your request came from, both of which help us spot automated abuse of a public form.
Form submissions are stored in our Cloudflare-hosted submissions database and delivered to us by Resend as an email, so we have a backup record even if email delivery has a temporary problem.
Why we may use it, and on what basis
We use these details for one purpose: to reply to you about Inbox Steward and, if it goes that way, to arrange an assessment or a pilot conversation. The lawful basis is our legitimate interest in responding to someone who has asked us to get in touch.
We do not send marketing email. You will not be added to a list, a newsletter, or a sequence. If you enquire and we reply and nothing comes of it, that is the end of the correspondence. It would be a strange thing for a company that sells inbox quiet to do otherwise.
Who else sees it
Two processors, both acting on our instructions and neither using your data for their own purposes:
- Cloudflare — hosts the site, runs Turnstile, and stores form submissions for us.
- Resend — delivers the submission to us as an email.
Beyond that, your details are not sold, rented, shared, or passed to advertisers, data brokers, or any other third party. We would disclose information only where we are legally required to.
How long we keep it
Enquiries live in our submissions database and in our own mailbox as ordinary correspondence. We delete enquiries that did not lead anywhere, and keep the correspondence of customers and pilot participants for as long as we work together and for a reasonable period afterwards for our records.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to our using it at all. Email [email protected] and we will deal with it — there is no form and no process to navigate. If you are in the UK or the EU and you think we have handled your data badly, you also have the right to complain to your data protection regulator.
The service itself
Everything above is about this website. Inbox Steward as a service necessarily works on the contents of a mailbox, and that is a much bigger question than a contact form.
Pilot V1 is for Microsoft 365 mailboxes. Nothing is connected until you authorize it through Microsoft’s standard consent screen, where you see the exact permissions before approving them, and from which you can withdraw access at any time without going through us. Additional mailbox providers may be supported later, but they are not part of the current pilot. What the service reads, what it stores, where it runs, and what happens in the small proportion of cases escalated to a model are set out in the service agreement, in writing, before any of it happens. If you want to read that before you enquire, ask and we will send it.
Changes
If this notice changes materially we will update the date below. We do not keep a version history of it, so if a specific wording matters to you, keep a copy.