Privacy Policy

Who we are

WiserInbox is run by Wiser Inbox Pty Ltd (ACN 703 652 733, ABN 65 703 652 733), 307/147 Pirie Street, Adelaide SA 5000, Australia. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This policy covers wiserinbox.com and the WiserInbox app. It should be read with our Terms of Service.

What we collect

Your account

• Your name, email address and time zone.
• Your password, stored only as a one-way hash. Two-factor secrets and recovery codes are encrypted, and passkeys are stored as public keys.
• Your settings, and when you agreed to our terms.
• The organisations you belong to and your role in them.

Your connected mailboxes

• The mailbox address and provider, and the access tokens (for Google and Microsoft) or password (for IMAP) we use to connect. These are encrypted.
• Your messages: subject, sender and recipients, dates, message and thread identifiers, read and flag status, folders, and the full text and HTML body. This includes messages in your Spam and Trash folders for Gmail.
• Attachment details such as file name, type and size. We only keep a copy of the attachment file itself when you open it, or when it is analysed, and only for safe types (PDF, text and common image formats).

What WiserInbox creates

• AI results for your messages: summaries, priority, security assessments and the reasons for them, and suggested tasks and events.
• The projects, tasks and calendar events you or the AI create.

Billing

• Your plan, credit balance and a record of credit use, including how much AI processing each analysis used.
• Your Stripe customer ID and the type and last four digits of your card. Stripe collects your full card details and billing address; we never see or store full card numbers.

Technical information

• Your IP address, browser details and activity time while you are signed in, stored with your session.
• Server logs used to keep the service running and secure. Our AI activity logs record IDs and outcomes, not the content of your email.

How we use it

We use your information only to:

• run your account and show your mail, tasks and calendar in WiserInbox;
• keep your mailboxes in sync, and carry out the actions you take, such as marking mail read, flagging it or moving it to the trash;
• triage, summarise and security-check your email, and suggest tasks and events;
• bill you, add credits and track credit use;
• send you service emails, such as verification, password resets, invitations, low-credit and billing notices, and notices when an inbox is removed;
• keep the service secure, prevent abuse and fix problems; and
• meet our legal obligations.

We do not sell your information, use it for advertising, or build marketing profiles from your email.

How the AI reads your email

AI analysis runs on new messages that arrive in your inbox after you connect a mailbox, and on any message you choose to analyse. Mail in other folders, drafts and quarantined mail are not analysed automatically. You can switch automatic analysis off in your settings at any time.

Analysis happens in two steps, using two AI providers:

• Triage, by TypeSafe. Every analysed message goes to TypeSafe to decide its priority and spot security warning signs. We send the sender's name and address, the subject, the time it was sent, whether you were only copied in, attachment names and types, the domains of links and the reply-to address, up to 12,000 characters of the message text, and the names, short descriptions and keywords of your projects and organisations so it can tell what's relevant to you.
• Closer analysis, by Anthropic. When triage finds something worth a closer look, such as a likely task or event, an important message, an attachment or a security concern, or when you ask for it, the message goes to Anthropic's Claude. We send the sender and recipients, subject, sent time, your time zone, up to 12,000 characters of the message text, and supported attachments (up to 10 files and 15 MB in total).

Both providers process this data only to return results to us. Anthropic does not use data sent through its commercial API to train its models. We treat email content as untrusted when we pass it to the AI, and the AI cannot send, delete or change anything in your mailbox.

Google and Microsoft data

WiserInbox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This applies to data from Gmail and Microsoft 365 alike. In particular, we:

• use your mailbox data only to provide and improve the features you see in WiserInbox;
• only transfer it to others where needed to provide those features (such as the AI providers above), to comply with the law, or as part of a merger or sale with your data protected the same way;
• never use it for advertising, never sell it, and never use it to train general-purpose AI models; and
• do not let people read it, unless you ask us to (for example for support), it is needed for security or to investigate abuse, or the law requires it.

You can remove WiserInbox's access at any time from your Google account or Microsoft account, or by removing the mailbox in WiserInbox.

Who we share it with

Service providers

We use these providers to run WiserInbox. They may only use your information to provide their service to us.

Google, Microsoft and your IMAP provider also receive the requests WiserInbox makes to your mailbox, such as marking a message read.

People in your organisation

Only you can read the mail in mailboxes you connect. Owners and admins of a shared organisation can see which inboxes are connected to it, who connected them, and how many credits they use, and can remove them. They cannot read your mail. Projects, tasks and calendar events in a shared organisation are visible to its members, and a task created from an email includes its subject and sender.

Other cases

We may disclose information if the law requires it, to protect people's safety or our rights, or to a buyer if our business is sold, in which case this policy will continue to protect your information.

Overseas storage

Some of our providers store or process data outside Australia, mainly in the United States. We take reasonable steps to make sure they protect your information in a way that is consistent with the Australian Privacy Principles.

Keeping and deleting data

We keep your data while your account is open, so your inbox history stays available. You can delete it at any time:

• Disconnecting a mailbox stops syncing, deletes its access tokens or password, and revokes our Google access. Its messages stay in WiserInbox until you remove the mailbox.
• Removing a mailbox permanently deletes its messages, attachments, folders and AI results.
• Deleting your account permanently deletes your profile, your mailboxes and everything stored for them, and the organisations you own on your own. Tasks and events you created in shared organisations stay with that organisation, without your name.

When a message is deleted from your mailbox, we delete our copy the next time it syncs. Deleted data may remain in our hosting provider's backups for a short period until they are replaced. We keep billing and tax records for as long as Australian law requires, usually five years.

Security

We protect your information with encryption, access controls and careful handling of email content. Our Security page explains how. If we have a data breach that is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as the law requires.

Cookies

We only use the cookies needed to keep you signed in and to protect forms against cross-site attacks. We don't use advertising or analytics cookies or third-party trackers, and our fonts are served from our own site.

Your choices and rights

• You can see and update most of your information in the app, and delete mailboxes or your account yourself.
• You can ask us for a copy of the personal information we hold about you, or ask us to correct it. We will respond within 30 days.
• You can switch off automatic AI analysis and automatic task and event creation in your settings.
• WiserInbox is not intended for anyone under 18.

Changes to this policy

We may update this policy. The date at the top shows the latest version. If we make a change that materially affects how we use your information, we will email you before it takes effect.

Contact and complaints

For privacy questions or requests, email privacy@wiserinbox.com or write to us at:

If you are unhappy with how we have handled a complaint, you can contact the Office of the Australian Information Commissioner.