Inboxıa

Legal

Privacy Policy

Last updated: August 2026This document is provided for general informational purposes and does not constitute legal advice.

1. Introduction

Inboxia (“we”, “our”, “us”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using Inboxia, you agree to the practices described in this policy.

2. Information We Collect

We collect information you provide directly and information generated through your use of the service:

  • Account information: Business name, email address, and password when you register.
  • Usage data: Pages visited, features used, and actions taken within the platform.
  • WhatsApp messages processed: Conversation content is processed to generate AI responses. Message content is stored temporarily for conversation history and analytics.
  • Knowledge base content: Content you add to train your AI (service descriptions, FAQs, pricing, etc.).
  • Payment information: Billing is handled by our payment processor. We do not store card numbers.

3. How We Use Your Information

  • To provide, operate, and improve the Inboxia platform.
  • To generate AI responses to your customers’ WhatsApp messages.
  • To send you service notifications, billing information, and product updates.
  • To analyze usage patterns and improve features.
  • To comply with legal obligations.

4. Cookies

Inboxia uses session cookies for authentication purposes only. These are essential cookies required for the service to function. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Session cookies are deleted when you log out or close your browser.

5. Third-Party Services

Inboxia integrates with the following third-party services:

  • WhatsApp: Used to send and receive WhatsApp messages on your behalf, currently connected via QR code / pairing code linking rather than Meta’s official WhatsApp Business Cloud API. We plan to move to Meta’s official Cloud API as we grow. Message data is subject to WhatsApp’s own terms and privacy policy either way.
  • Cloudinary: Used to store and serve media files (e.g., images in conversations). Governed by Cloudinary’s privacy policy.
  • AI processing: Message content is transmitted to one or more AI infrastructure providers to generate responses, selected automatically based on availability, cost, and performance. Message content is transmitted to whichever provider is used solely to generate a reply.

6. Data Retention

We retain your account data, including conversation history, for as long as your account is active. When you request account deletion, we hold your data for a 14-day grace period during which you can reactivate your account; after that period ends, your data is deleted or anonymized as part of our regular cleanup process, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Deletion: Request deletion of your account and associated data.
  • Portability: Request an export of your data in a machine-readable format.
  • Correction: Request correction of inaccurate data.

To exercise any of these rights, contact us at [email protected].

8. Security

We use industry-standard security measures including HTTPS encryption for all data in transit, encrypted storage for sensitive data, and regular security reviews. No system is perfectly secure; we encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.

9. Contact

For privacy-related questions or to exercise your rights, contact us at: [email protected]