Privacy Policy

What ClearBox Does

ClearBox is an academic inbox layer that connects to your Google account to extract structured event information (seminars, workshops, deadlines) from your institutional emails. It helps you track and triage upcoming events without manually scanning your inbox.

Data We Access (Google API Services)

ClearBox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Service User Data Policy, including the Limited Use requirements.

When you sign in with Google, ClearBox requests the following scopes:

• https://www.googleapis.com/auth/gmail.readonly:Used to read institutional email snippets and subjects. This data is processed to extract event metadata (like title, date, and location). We do not read full message bodies or attachments.
• https://www.googleapis.com/auth/calendar.events:Used only when you explicitly click the "Add to Google Calendar" button. We use this to create a single event entry on your behalf.
• openid, userinfo.email, userinfo.profile:Used for authentication and to create your ClearBox account.

How We Use Your Data

We use the collected information solely to provide and improve the functionality of ClearBox. Specifically:

• To extract and display academic event information.
• To allow you to triage and track these events.
• To push events to your Google Calendar at your request.

We do not use Google user data for advertising, and we do not sell your personal information to third parties.

Data Sharing & Transfer

ClearBox does not share your Google user data with third-party applications or services, except in the following limited circumstances:

• As necessary to provide the core service (e.g., storing event metadata in our secure database).
• To comply with applicable laws or protect our rights.

Data Retention & Deletion

We retain extracted event metadata only as long as your account is active. You can delete your entire account and all associated data at any time via a single click in your account settings (referencing our complete cascading delete architecture).

For manual deletion requests or privacy concerns, contact us at privacy@clearbox.tech.

Security

All communication between your browser and ClearBox is encrypted via HTTPS. OAuth tokens are stored securely and are never exposed to the client. We use industry-standard authentication (NextAuth.js) and database security (PostgreSQL with TLS).

Contact

For privacy concerns or data deletion requests, please reach out via the contact information provided on our main page.