Privacy Policy

1. Introduction

Inboxia (“we”, “our”, “us”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using Inboxia, you agree to the practices described in this policy.

2. Information We Collect

We collect information you provide directly and information generated through your use of the service:

• Account information: Business name, email address, and password when you register.
• Usage data: Pages visited, features used, and actions taken within the platform.
• WhatsApp messages processed: Conversation content is processed to generate AI responses. Message content is stored temporarily for conversation history and analytics.
• Knowledge base content: Content you add to train your AI (service descriptions, FAQs, pricing, etc.).
• Payment information: Billing is handled by our payment processor. We do not store card numbers.

3. How We Use Your Information

• To provide, operate, and improve the Inboxia platform.
• To generate AI responses to your customers’ WhatsApp messages.
• To send you service notifications, billing information, and product updates.
• To analyze usage patterns and improve features.
• To comply with legal obligations.

4. Cookies

Inboxia uses session cookies for authentication purposes only. These are essential cookies required for the service to function. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Session cookies are deleted when you log out or close your browser.

5. Third-Party Services

Inboxia integrates with the following third-party services:

• Meta WhatsApp Cloud API:Used to send and receive WhatsApp messages on your behalf. Governed by Meta’s privacy policy.
• Cloudinary:Used to store and serve media files (e.g., images in conversations). Governed by Cloudinary’s privacy policy.
• OpenRouter (AI processing): Used to process conversation content and generate AI responses. Message content is transmitted to OpenRouter to fulfill this function.

6. Data Retention

We retain your account data for as long as your account is active. Conversation history is retained for a rolling 12-month period. After account deletion, we will delete or anonymize your data within 14 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Deletion: Request deletion of your account and associated data.
• Portability: Request an export of your data in a machine-readable format.
• Correction: Request correction of inaccurate data.

To exercise any of these rights, contact us at [email protected].

8. Security

We use industry-standard security measures including HTTPS encryption for all data in transit, encrypted storage for sensitive data, and regular security reviews. No system is perfectly secure; we encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.

9. Contact

For privacy-related questions or to exercise your rights, contact us at: [email protected]