Draft, last updated 26 October 2026

Privacy policy

Unjunk ("we", "us") is a tool that cleans up a personal Outlook, Hotmail or Live inbox (and, in a limited beta, a Gmail inbox) by dealing with senders rather than individual emails. This page explains what we read, what we keep, and how to have it removed. Questions go to hello@unjunk.io.

Signing in

You sign in to Unjunk with your email address: we email you a one-time link. To send it and to stop abuse, we record the address, when the link was requested and used, the IP address it was requested from, and your browser's user agent. We store only a one-way hash of the link itself. These sign-in records are used for rate limiting and security, and are deleted after 30 days. Sign-in emails are sent through our email provider, Resend.

What we ask Microsoft for

When you connect an Outlook, Hotmail or Live mailbox you are asked to allow these Microsoft Graph permissions:

• User.Read: your name, email address and Microsoft account ID, so we know whose mailbox this is.
• Mail.ReadWrite: to read message headers (sender, subject, date, unsubscribe headers) for the scan, and to move messages you have asked us to clear out of your inbox.
• MailboxSettings.ReadWrite: to create and update the inbox rules that keep junk out once you have decided on a sender.
• offline_access: so long-running jobs, such as moving a large backlog, can continue after you close the page.

What we ask Google for (Gmail, beta)

When you connect a Gmail mailbox you are asked to allow these Google permissions:

• openid and email: your Google account ID and Gmail address, so we know which mailbox is connected and that only one Unjunk account holds it.
• https://www.googleapis.com/auth/gmail.modify: to read message headers (sender, subject, date, unsubscribe headers) for the scan, count your inbox, and move or label messages you have asked us to clear out of your inbox. It does not allow permanently deleting mail.
• https://www.googleapis.com/auth/gmail.settings.basic: to create and update the Gmail filters that keep junk out once you have decided on a sender.

We also ask Google for offline access, so long-running jobs can continue after you close the page.

Limited Use. Unjunk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Gmail data only to provide and improve the inbox cleaning you ask for; we do not use it for advertising; we do not sell it; we do not transfer it to anyone except as needed to run Unjunk, to comply with the law, or as part of a merger or sale with the same protections; and no person at Unjunk reads it unless you ask us to (for example, for support), it is needed for security or to comply with the law, or it has been aggregated and anonymised. The optional share-to-improve feature below never includes Gmail message content.

What we store

• Your account: email address, name (taken from a connected Microsoft account, if any), and whether you opted in to sharing.
• For each connected mailbox: its address, whether it is Outlook or Gmail, and the Microsoft or Google account ID it belongs to.
• Sender metadata for your mailbox: each sender's address, domain and display name, how many messages they sent, one sample subject line, unsubscribe options, first and last seen dates, and your decision (junk, keep, route or later).
• A record of the rules we created and dated backups of your mailbox rules, so changes can be undone.
• Job progress counts, your credit balance and purchase history.
• A Microsoft or Google refresh token for each connected mailbox, encrypted with AES-256-GCM before it is written to our database. It is never shown in the app or written to logs.

What we never store

We never store the body or attachments of any email. Message contents are not copied to our servers. Subjects are read to rank senders; we keep one sample subject per sender so you can recognise it in the review queue.

Payments

Payments are handled by Stripe. We do not see or store your card number. Stripe tells us the amount paid and a payment reference, which we keep for receipts and refunds.

Share-to-improve (optional, off by default)

If you turn this on, we record which sender domains you flag and why, with the address one-way hashed, to suggest junk senders to other users. Never subjects, previews or content. Turning it off deletes your contributions.

Where your data lives

The app runs on Fly.io in Sydney and uses a managed Postgres database. Sign-in emails are sent by Resend. We use these providers only to run Unjunk.

Deleting your data

You can disconnect a mailbox at any time from the Account page. That deletes its stored refresh token and the sender list, decisions and rule records for that mailbox straight away; for Gmail we also ask Google to revoke Unjunk's access. To delete your whole Unjunk account, email hello@unjunk.io and we delete it within 30 days of the request; a self-serve button is on the way. You can also revoke Unjunk's access at any time from your Microsoft account's app permissions or your Google account's third-party access page. Rules and filters already created in your mailbox stay there until you remove them; they are yours.

Your rights

We handle personal information in line with the Australian Privacy Principles. You can ask to see or correct what we hold about you, or complain, by writing to hello@unjunk.io.