更新日期：2026 年 10 月 6 日
InboxWorkbench 隐私政策Privacy Policy
本政策说明 InboxWorkbench macOS 应用当前只读版本如何访问、使用、保存和分享 Google 用户数据。运营与支持联系邮箱为 dinghao361@gmail.com。
访问哪些数据
你通过 Google 官方页面登录并明确授权后，应用使用 Gmail 只读权限读取账号邮箱地址、邮件总数以及邮件列表信息：邮件和会话标识、邮件头、日期、估算大小、标签和附件标记。邮件头可能包含发件人、收件人、回复地址和主题；应用只保留用于列表的发件人及显示名、主题，其他邮件头随本次解析结束丢弃。应用解析 MIME 结构中的附件文件名以判断是否有附件，不下载邮件正文或附件内容，也不请求联系人、邮件发送或修改权限。
数据用于什么
这些数据仅用于你在应用中看到的功能：确认当前账号、展示和筛选邮件列表、按发件人统计邮件及估算大小，以及打开对应的 Gmail 会话。首次登录或恢复登录后自动读取最近 100 封邮件；你可以停止读取或手动扫描更多邮件。
保存位置与保留时间
真实邮件索引和账号邮箱地址保留在应用进程内存中，不写入本地邮件数据库。退出登录、切换账号或关闭应用后，原账号的列表从本次运行中清除。OAuth 登录凭据和客户端配置保存在本机 macOS 钥匙串；退出登录删除本应用保存的登录凭据，但保留客户端配置和保护偏好。
演示邮箱使用虚构数据，演示邮件与操作记录保存在本机独立数据库。保护偏好保存在钥匙串。用户主动导出的演示处理记录由用户自行选择保存位置；真实邮箱的远程处理尚未开放。
数据分享与 Limited Use
应用直接与 Google 的 OAuth 和 Gmail API 通信，不将真实邮件、登录 Token 或邮箱列表上传到 InboxWorkbench 的服务器，也不集成收集邮件数据的第三方分析服务。应用不出售 Google 用户数据，不将其用于广告、信用评估或训练通用人工智能模型。开发者不会通过应用远程查看你的邮件。
InboxWorkbench 对 Google API 数据的使用遵守 Google API Services User Data Policy，包括 Limited Use 要求。InboxWorkbench follows Google's Limited Use requirements for data received from Google APIs.
退出、撤销授权与删除
在应用的账号菜单或设置中选择“退出登录”，可清空当前邮件列表并删除本机保存的登录凭据。这不会退出浏览器中的 Google 账号，也不会自动撤销 Google 保存的应用授权。
你可以在 Google 账号连接管理中移除 InboxWorkbench 的授权。若需删除保留的本机配置或偏好，可联系支持获取操作说明。卸载应用不代表 macOS 钥匙串中的项目一定会自动删除。
政策更新与联系
如未来增加邮件修改、持久化或其他数据处理方式，我们会先更新隐私说明，并在需要时重新请求授权。有关本应用数据处理的问题，请联系 dinghao361@gmail.com。不要在支持邮件中发送登录 Token、密码或未经必要处理的邮件内容。
InboxWorkbench Privacy Policy (English)
Last updated: October 6, 2026. This policy describes the current read-only version of the InboxWorkbench macOS application. Contact the operator at dinghao361@gmail.com for privacy or support questions.
Google user data we access and its purpose
After you authorize the app through Google's OAuth consent screen, InboxWorkbench uses the Gmail read-only permission to access your email address, mailbox message count, message and thread identifiers, email headers, dates, estimated sizes, labels, and attachment indicators derived from MIME file-name metadata. Email headers may include sender, recipient and reply addresses and subjects. The app retains only the sender address and display name and the subject for its message list; other headers are discarded after parsing. These data power the visible email list, sender summaries, search, filters, size estimates, and links that open the corresponding thread in Gmail. The app does not download email bodies or attachment contents, request your Google password, send emails, or modify real messages.
Storage, retention and sharing
Real Gmail indexes and the connected email address are kept only in local process memory and cleared when you sign out, switch accounts, or close the application. OAuth credentials and the desktop client configuration are stored in your local macOS Keychain. Signing out deletes the app's saved login credentials while retaining the client configuration and protection preferences. Sample emails and sample cleanup records are fictional and stored in a separate local demo database. Protection preferences are stored in Keychain.
The app communicates directly with Google's OAuth and Gmail APIs. No InboxWorkbench backend receives your Gmail messages, indexes or login tokens. The app does not sell Google user data, use it for advertising or credit decisions, send it to third-party analytics services, or use it to train general-purpose AI models. Developers cannot remotely read your email through this app. InboxWorkbench follows the Google API Services User Data Policy, including its Limited Use requirements.
Your controls and policy changes
Signing out clears the current list and saved local login credentials. It does not sign you out of Google in your browser or revoke Google's saved authorization. You may revoke InboxWorkbench's access from Google Account connections. Contact support for instructions to remove retained local configuration or preferences; uninstalling the app may not delete Keychain entries. Before introducing message modification, persistent Gmail storage, or other data uses, we will update this policy and request additional authorization when needed.