Acceptable use
Last reviewed
Postbox is free, has no paid tier, and makes no promise of availability. Use it for mailboxes you are entitled to read.
What you agree to
- Connect only mailboxes you own or are authorised to access.
- Do not use it to send bulk unsolicited mail. Gmail’s own limits and policies apply to everything sent through it, and your Google account carries the consequences.
- Do not attempt to reach another user’s data, or to work around the isolation between accounts.
- Keep your own Google OAuth credentials, if you supply them, to yourself.
What this app promises
- Your mail stays in Gmail. Postbox reads it on your behalf and writes changes back.
- Secrets are encrypted at rest and never returned to the browser.
- You can disconnect and delete everything at any time, from the app or from your Google account.
What it does not promise
- Uptime, backups, or preservation of the activity feed and logs.
- That Google will keep granting access. Projects left unverified stay in Testing, where access expires every seven days and only listed test users may connect at all.
It is provided as is, without warranty. If you find a security problem, the reporting process is in SECURITY.md in the repository.