How Inboxrise handles
your mailbox

What we connect to, what we read, how we store your App Password, and how to take access away.

An App Password, never your account password

You connect each inbox with an App Password over standard SMTP (to send) and IMAP (to read replies). We never ask for your normal password and there is no "Sign in with Google" for mailboxes.

An App Password works only for mail. You can revoke it at any time from your Google, Microsoft or mail provider account settings, and Inboxrise loses access at once.

Only what we need to protect your sending

In your inbox we look at the sender and subject of new messages to spot replies and bounces from your campaigns. We keep the content only of messages from your own campaign contacts, so you can read and answer them in Inboxrise. Everything else is left untouched.

For warmup, we check your spam folder for warmup emails, move them back to the inbox, and file warmup mail into a folder called Inboxrise Warmup. We do not read your other folders.

Encrypted before it is saved

Before anything is saved, we test the App Password against your mail server. If the login fails, nothing is kept.

If it works, the App Password is encrypted with AES before it is stored, and it is only decrypted at the moment we send or check mail for you. Delete an inbox in Inboxrise and its stored password goes with it.

Built and run from Bengaluru, India

Questions about security or your data: support@inboxrise.com. How we handle personal data is set out in our Privacy Policy.