Security

This page is maintained by Bot Master Pros. It describes the security practices currently enabled in Inbox Pros — it is not an independent certification.

Authentication

Email/password and Google sign-in. Sessions expire after 30 days.

Data at rest

All data is stored in an encrypted Postgres database with row-level security so each user can only read their own rows.

OAuth scopes

We request the minimum Gmail/Outlook scopes needed to read and archive email you explicitly import. You can revoke access at any time from your Google or Microsoft account settings.

Reporting

Found a vulnerability? Email security@botmasterpros.com. We aim to respond within 48 hours.