Privacy Policy

Welcome to Inboxy ("we", "us", or "our service"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform.

Account Information: When you create an account, we collect your name, email address, phone number, and company name.

Usage Data: We collect information about how you use the platform, including pages visited and actions taken.

Conversation Data: We store messages sent and received through the platform to provide our unified inbox service.

Integration Data: When you connect third-party services (WhatsApp, Instagram, e-commerce platforms), we store credentials and data necessary for the integration to function.

• Provide, operate, and maintain our services
• Process and manage your account
• Send service notifications and updates
• Improve and develop our services
• Comply with legal obligations
• Provide customer support

We implement appropriate security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit and at rest, access controls, and regular security audits.

• Strong passwords for every account, mandatory two-factor authentication for Inboxy staff, and an access log of staff views of merchant data in the admin panel and while signed in to a merchant account for support.
• Test and production data are kept separate: production data is never copied to developer machines or test environments.
• A written security incident response policy: if personal data is affected we notify the affected merchants within 72 hours, and we notify Shopify within 24 hours of any incident involving data received from Shopify.

Roles, sub-processors and security measures are set out in our Data Processing Addendum.

We do not sell your personal data. We may share your information only in the following circumstances:

• With third-party service providers who help us operate the platform (e.g., cloud hosting, payment processing)
• When necessary to comply with legal obligations
• With your explicit consent

You have the right to:

• Access your personal data and request a copy
• Correct any inaccurate data
• Request deletion of your data
• Object to the processing of your data
• Request data portability

The Inboxy platform uses necessary cookies to keep you signed in and to protect your account; it cannot work without them.

On our website, measurement and advertising cookies stay off until you accept them in the cookie banner. If you accept, we use Google Analytics and Microsoft Clarity through Google Tag Manager to measure and improve the website, and we keep the source of your first visit (campaign tags, ad click ids, the referring site and the first page) for 90 days so we know which ad brought you when you create an account. Your choice itself is kept for 180 days.

You can change your choice or withdraw consent at any time from «Cookie settings» at the bottom of every website page, and you can delete cookies from your browser.

We retain your personal data for as long as your account is active or as needed to provide our services. You can request deletion of your account and data at any time.

When you connect your Salla, Zid, or Shopify store to your Inboxy account, we store only the store data needed to run the service:

• Store details: name, store ID, domain, and currency.
• Products and their options (variants).
• Orders and their statuses.
• Your store's customers: name, phone number, email address, and address, as far as needed to message them on WhatsApp and create orders.
• The OAuth access tokens the store grants to Inboxy, which are stored encrypted.

When you uninstall the app: the access tokens are cleared and syncing with the store stops. Conversation and order history stays in the merchant's Inboxy account until the merchant asks for it to be deleted.

For the Shopify app, we handle the privacy requests Shopify sends (customer data request, customer erasure, and shop erasure). After an uninstall, the customer records we copied from the store are erased when Shopify sends the shop erasure request, or after 30 days if it does not arrive.

To request deletion of your data, use our data deletion page or email us at support@inboxy.chat.

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through a notice on the platform.

If you have any questions about this Privacy Policy, you can reach us at:

• Email: info@inboxy.chat
• WhatsApp: 201021482418