Your email belongs to you.

Last updated August 24, 2026

Unibox is a macOS email client that connects directly to email providers at your request. This policy explains what the app accesses, where sensitive data is stored, and which optional services receive information.

Google account data

When you connect a Gmail or Google Workspace account, Unibox requests the Google permissions needed to read, compose, send, organize, and search your mail and to help populate account-specific contacts. Unibox uses this data only to provide features you choose inside the app.

Microsoft, Yahoo, and IMAP account data

Microsoft 365 and Outlook accounts use Microsoft authorization. Yahoo Mail uses the app password you provide, and generic IMAP/SMTP accounts use the server settings and credentials you enter. Unibox uses these connections only to provide the mail features you request.

Storage and security

OAuth tokens, Yahoo app passwords, IMAP/SMTP passwords, optional OpenAI API keys, and sensitive subscription access state are stored in macOS Keychain on your Mac. Message caches are bounded and stored locally alongside drafts, signatures, contacts, and preferences. Provider connections use HTTPS, TLS, or STARTTLS as applicable. Unibox does not operate a separate server that stores the contents of your email accounts.

Optional AI features

AI features are disabled by default. If you enable them and provide your own OpenAI API key, only the message text needed for the action you select is sent directly from the app to OpenAI. Attachments are not sent to OpenAI. OpenAI’s terms and privacy policy govern that processing. Unibox does not receive your API key or AI request content.

LinkedIn messaging companion

The LinkedIn companion creates editable drafts and can organize LinkedIn email notifications. It does not receive your LinkedIn password, scrape LinkedIn, read LinkedIn conversations, or automatically send messages. You choose what to copy and send through LinkedIn.

License delivery and product emails

When you request a trial at getunibox.net, we store your name, email address, a secure one-way password hash, trial and subscription status, and email preferences so we can verify access and provide the setup messages you choose. The website uses Neon to store subscriber records and Resend to deliver transactional and opted-in product emails.

Payments

Stripe processes subscription payments and provides the secure checkout and customer portal. Unibox stores Stripe customer and subscription identifiers and payment status, but does not receive or store your full card number. Stripe processes payment information under its own privacy policy.

Website analytics and performance

Getunibox.net uses Vercel Web Analytics and Speed Insights to understand aggregate page visits, conversion steps, and site performance. Conversion events do not include your name, email address, password, access code, message content, or payment details.

Sharing and sale

Unibox does not sell your personal information. Account data is not shared with third parties except when you direct the app to use a service, when a provider is needed to deliver the website or license service, or when required by law.

Your choices

You can disconnect an account in Unibox at any time. Google and Microsoft access can also be revoked from the provider’s account-security settings. You can disable AI features and remove the saved API key from Unibox settings. Every onboarding or update email includes an unsubscribe link; unsubscribing from setup or marketing emails does not cancel or deactivate a paid subscription.

Contact

Questions about this policy can be sent to support@getunibox.net.