Privacy Policy

Effective Date: April 18, 2026 · GALAXZ HOLDINGS INC, doing business as UpGPT

1. Overview

UpInbox is a Chrome extension developed by GALAXZ HOLDINGS INC (dba UpGPT) that helps users categorize, clean, and organize their Gmail inbox. We are committed to your privacy. This policy explains what data we collect, how we use it, and your rights as a user.

2. Data We Collect

UpInbox collects only the minimum data required to function:

Email address: Your Gmail address is stored locally in your browser to identify your account within the extension.
OAuth token: A Google OAuth access token is stored locally to authenticate Gmail API requests on your behalf. We do not store this token on our servers.
Email metadata and content: Subject lines, sender addresses, and message content are read locally in your browser to categorize your inbox. Email content is never transmitted to UpGPT servers.
Extension settings: Your preferences, Smart Rules, and scan history are stored locally in Chrome storage on your device.

3. How We Use Your Data

To categorize and organize your Gmail inbox based on your preferences
To apply Smart Rules and execute bulk cleanup actions you request
To save your settings and preferences between sessions
To provide optional AI-powered features using your own API key (BYOK)

4. Local Processing — Your Emails Stay in Your Browser

All email reading and categorization happens locally within your browser. Your emails are never uploaded to, processed by, or stored on UpGPT servers. This is a core architectural principle of UpInbox.

When you use optional BYOK (Bring Your Own Key) AI features, your email content is sent directly from your browser to your chosen AI provider (OpenAI, Anthropic, or Google) using your own API key. UpGPT does not intercept, store, or have access to this data.

5. Data Sharing

We do not sell your personal data. We do not share your information with advertisers or data brokers. The only external services involved are:

Google Gmail API (googleapis.com): To read, label, and manage your emails per your explicit instructions
Your chosen AI provider (OpenAI, Anthropic, or Google) — only if you enable BYOK AI features
UpGPT backend (api.upgpt.ai): For account sync and feature entitlements — no email content is ever transmitted

6. Data Retention

All data stored by UpInbox resides in your browser's local storage. It is automatically deleted when you uninstall the extension. You may also clear all local data at any time via the extension Settings panel.

We do not retain copies of your data on our servers. Any account-level data at api.upgpt.ai (email address and subscription status only) is deleted upon account deletion request.

7. Your Rights

You may revoke UpInbox's access to your Gmail account at any time via your Google Account permissions page. To request deletion of any account-level data held by UpGPT, contact us at privacy@upgpt.ai. We respond to all privacy requests within 30 days.

8. Security

OAuth tokens are stored in Chrome's sandboxed local storage and are never exposed to external parties. All communication with Google APIs and UpGPT backend services uses HTTPS encryption.

9. Children's Privacy

UpInbox is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us at privacy@upgpt.ai.

10. Changes to This Policy

We may update this policy periodically. The effective date at the top reflects the most recent revision. Continued use of the extension after changes constitutes acceptance of the updated policy.

11. Contact

For privacy questions or data deletion requests:

Email: privacy@upgpt.ai
Support: hello@upinbox.ai
Address: 30 N Gould Street, STE R, Sheridan, WY 82801