Security & Safety
Last updated: August 2026
How OneInbox protects accounts, sessions, and customer conversations.
Account security
Sign-in supports email verification codes and Google sign-in. Email addresses are verified before an account becomes active.
Data access rules
Profile data is protected by row-level access rules in the database: a signed-in person can read and write only their own row.
Sessions
Sessions are stored in your browser and refreshed automatically. Signing out clears the session immediately.
Reporting a problem
Found a vulnerability? Email security@oneinbox.app with steps to reproduce. Please do not test against other people's accounts.