Privacy Policy

Operated by Orumio. This policy covers inbox-works.com — this site, its demo and its early-access list — and the emails we write first to businesses at the address they publish. Inbox Works itself is not open yet; this policy is extended to cover it before it opens.

1. Who we are

Inbox Works is built and operated by Orumio (“we”, “us”).

2. What this site processes

2.1 The early-access list

When you ask for early access, we keep the email address you give, the time you gave it, the source named by the link that brought you here if it named one (a short word, such as the name of an ad or a post), and whether you came from the demo. Nothing else: no name, no company, no other detail about you.

2.2 Visiting the site

Like any website, a visit sends technical data with each request, such as your IP address and your browser’s name. Cloudflare, which hosts this site, processes it to deliver the page and protect it from abuse. We keep no record of visits; we count them. For each day we keep how many visits came from each source a link named, and nothing else: no IP address, no identifier, nothing about the visit.

2.3 The demo

The demo runs in your browser with sample people and emails. What you type in it stays in your browser; it is not sent to us. The demo counts two moments — when it opens, and when you first send a reply or mark an email Done — by sending this site the step and the source named by the link that brought you, and nothing else. They are kept as totals, like the visits in 2.2.

2.4 If we wrote to you first

We write to some small studios and agencies at the shared address they publish on their own website, such as hello@, to ask whether they would try the demo and tell us what it is missing. For that we keep the business’s name and website, the address as it is published, where and when we found it, its country, which mail service its domain uses, our notes, and the emails between us. We do not buy lists, we write only to an address a business publishes for being contacted, and we keep no one’s name unless they write to us with it.

3. Why we process it

We use your address only to write to you when your team can start using Inbox Works, to answer you if you write to us, and, if you asked for early access on or after 2 October 2026 (version 1.1 of this policy), to write to you once, in person, to ask about your team. We use what 2.4 describes only to write to that address about Inbox Works and to keep track of what you answer; our legitimate interest is asking the businesses it is made for whether it is useful to them. Answer “no” to any of our emails and we stop. We use the sources and the counts only in totals, to see which ways of finding Inbox Works lead people to try it and ask for it.

We do not, and this site has no mechanism to:

• use the early-access list or the counts for marketing or advertising, or profile anyone for those purposes;
• sell or share your data with anyone;
• use your data to train machine-learning models.

This site makes no automated decisions about people.

4. Who else processes it (sub-processors)

The database is kept in Cloudflare’s Asia-Pacific region. If you are in the European Economic Area or the United Kingdom, this means your data is transferred outside that region. We are established in Japan, which the European Commission and the United Kingdom have each recognised as providing adequate protection. Email is handled in Google’s data centres, which may also be outside your region. Write to support@inbox-works.com if you need the details of the safeguards that apply to the onward transfers to these providers.

5. How it is protected

• The site is served over HTTPS only, so the address you give travels encrypted.
• The list is kept in a database that only this site’s own server code can reach; access to the account that runs it is limited to us.
• The site loads no third-party scripts, fonts or trackers.

6. Logging

This site keeps no logs of its own: the counts in 2.2 and 2.3 are totals, not records of visits. Cloudflare may keep the technical records any website host keeps to run and protect its network; those are governed by Cloudflare’s privacy policy.

7. Cookies and tracking

This site sets no cookies of its own and uses no advertising, analytics or tracking cookies. The demo keeps a few things in your browser, and none of them leaves it or identifies you: for the open tab only, a note for each of its two counts, so that each is sent once, and whether you have started, so that a reload keeps your place; until you start the demo again, what you were writing and the address you chose; and your settings in it, such as the list’s width.

8. How long it is kept

• Your address, with its source, is kept until early access ends, or until you ask us to remove it, whichever comes first.
• The counts identify no one; they are kept while we measure early access.
• What 2.4 describes: deleted 90 days after our last email if you did not answer, and at once if you answer “no” — then only the address is kept, on a list of addresses we never write to again. If we are talking, it is kept until early access ends.

9. Requests from data subjects

Write to support@inbox-works.com from the address you gave to see, correct or remove it, or to object to its use. We act on a request within one month. You can also complain to the data protection authority where you live; in the United Kingdom, the Information Commissioner’s Office (ico.org.uk); in Australia, the OAIC, and the ACMA for unsolicited email; in Canada, the Office of the Privacy Commissioner, and the CRTC for unsolicited email.

10. Security incidents

If we confirm an incident affecting your data, we notify you directly and in plain language — what happened, what data was involved, what we have done, and what if anything you need to do — targeting within 72 hours of confirming it.

11. Changes to this policy

If we change what this site does with data, we update this page and its version number before the change takes effect. If you are on the early-access list, we write to you about material changes.

12. Contact

Questions, requests, or anything that looks wrong in this policy: support@inbox-works.com.