Privacy Policy

Last updated 2 October 2026 · BobWork Email Warm-up · operated by BobOffice, LLC ("BobWork", "we")

What the service does

BobWork Email Warm-up ("the Service") builds sending reputation for mailboxes you connect by exchanging short, automatically generated emails between the mailboxes connected to your own account (your private pool), reading those warm-up emails, moving them out of Spam, marking them read and replying to some of them.

Information we collect

• Account: the email address you sign in with and sign-in codes sent to it.
• Connected mailboxes: the mailbox address, display name, provider, and the credential needed to act on it (a Google OAuth refresh token, or an IMAP/SMTP app password you enter). Credentials are stored encrypted on BobWork infrastructure and are never shown in the app.
• Warm-up activity: for each warm-up email we record sender, recipient, subject, time, and whether it arrived in Inbox or Spam. This is what the dashboard and health scores are built from.
• Domain records: public DNS records (SPF, DKIM, DMARC, MX) for the domains of connected mailboxes.
• Technical: IP address and user agent for sign-in rate limiting.

Google user data

When you connect a Gmail or Google Workspace mailbox, the Service requests the gmail.modify scope. We use it only to: send warm-up emails from that mailbox to your other connected mailboxes; find warm-up emails that your other mailboxes sent to it; move those warm-up emails out of Spam, mark them read, label and archive them; and reply to some of them.

Warm-up emails are identified by a header and subjects the Service itself generates. The Service does not read, store, move, forward, answer or analyse any other email in the mailbox, and does not use Google user data for advertising, profiling, or training models.

BobWork's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

To run the warm-up service, show you your dashboard, send you sign-in codes and (if you opt in) daily summaries, keep the Service secure, and improve deliverability outcomes. We do not sell personal data and do not share it with third parties except the processors below.

Processors

• Google (Gmail API) and your mail provider (IMAP/SMTP) — to act on connected mailboxes.
• Resend — to deliver sign-in codes and summaries.
• Cloudflare — network and TLS in front of the Service.

Retention and deletion

Warm-up activity is kept for 90 days. Removing a mailbox from the dashboard deletes its stored credential immediately. You can also revoke Google access at any time at myaccount.google.com → Security → Third-party access. To delete your account and all data, email info@bobwork.ai from the signed-in address; we complete deletion within 30 days.

Security

Credentials are encrypted at rest, transmitted only over TLS, and never exposed through the app or its API. Access is limited to the systems that run the warm-up engine.

Your rights

You can access, correct, export or delete your data by emailing info@bobwork.ai. If you are in the EU/UK you have the rights set out in the GDPR, including the right to complain to a supervisory authority.

Contact

BobOffice, LLC · info@bobwork.ai · https://bobwork.ai