Privacy Policy

1.1 Information You Provide

When you create an account and use InboxUni, we collect information that you voluntarily provide, including:

• Account Information: Name, email address, password, company name, and profile information
• Contact Data: Contact names, email addresses, phone numbers, and related information you add to your CRM
• Communication Content: Emails, messages, social media DMs, SMS, and other communications you send or receive through our platform
• Business Information: Proposals, templates, company information, and other business documents you create
• Payment Information: Billing details and payment card information (processed securely by our payment processor)

1.2 Information Collected Automatically

When you use InboxUni, we automatically collect certain information:

• Usage Data: Features used, pages visited, actions taken, time spent on platform
• Device Information: Browser type, operating system, IP address, device identifiers
• Log Data: Access times, error logs, and system activity
• Analytics Data: Performance metrics, feature adoption, and usage patterns

1.3 Information From Third Parties

When you connect third-party services to InboxUni, we may receive information from:

• Email Providers: Gmail, Outlook, and other email services you connect
• Social Media Platforms: Facebook, Instagram, LinkedIn, Twitter/X, TikTok, YouTube
• Communication Services: WhatsApp, SMS providers, Twilio
• Enrichment Services: Contact enrichment data from third-party providers

We use the information we collect for the following purposes:

2.1 Platform Services

• Provide and maintain the InboxUni platform and its features
• Process and route your communications across multiple channels
• Sync emails, messages, and social media interactions
• Manage your contacts, deals, and proposals
• Schedule and publish social media posts
• Process payments and manage subscriptions

2.2 AI-Powered Features

• Generate AI-assisted responses and content suggestions
• Classify and prioritize messages based on urgency and intent
• Provide intelligent insights and recommendations
• Automate routine tasks and workflows
• Analyze communication patterns to improve learning and personalization
• Generate competitive intelligence and market research

2.3 Platform Improvement

• Analyze usage patterns to improve features and user experience
• Troubleshoot technical issues and provide customer support
• Conduct research and development for new features
• Monitor platform performance and security

2.4 Communication

• Send service updates, security alerts, and technical notices
• Provide customer support and respond to your inquiries
• Send marketing communications (with your consent)
• Notify you about platform changes and new features

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who help us operate InboxUni:

• Cloud Hosting: Supabase for database and authentication services
• AI Services: OpenAI and Perplexity for AI-powered features
• Payment Processing: Stripe for secure payment processing
• Communication Services: Twilio for SMS and voice services
• Email Services: For transactional and marketing emails
• Analytics: For understanding usage and improving our service

3.2 Business Transfers

If InboxUni is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

3.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities, including:

• Compliance with legal obligations
• Protection of our rights and property
• Prevention of fraud or security threats
• Protection of user safety

3.4 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit using TLS/SSL and at rest using AES-256 encryption
• Access Controls: Strict access controls and authentication requirements for all systems
• Secure Infrastructure: Hosting on secure, SOC 2 compliant infrastructure
• Regular Audits: Regular security audits and vulnerability assessments
• Data Isolation: Workspace-level data isolation to prevent unauthorized access
• Token Encryption: OAuth tokens and API keys are encrypted before storage

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data is retained while your account is active
• After Deletion: Upon account deletion, most data is removed within 30 days
• Backup Data: Backup copies may be retained for up to 90 days for disaster recovery
• Legal Requirements: Some data may be retained longer to comply with legal obligations
• Anonymized Data: We may retain anonymized analytics data indefinitely

You have the following rights regarding your personal information:

6.1 Access and Portability

You can access and export your data at any time through your account settings or by contacting us.

6.2 Correction and Updates

You can update your account information and contact data directly through the platform.

6.3 Deletion

You can delete your account and associated data through account settings. Some data may be retained as required by law or for legitimate business purposes.

6.4 Marketing Communications

You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or adjusting your notification preferences in account settings.

6.5 Cookie Preferences

You can control cookie preferences through your browser settings. Note that disabling certain cookies may limit platform functionality.

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for platform functionality and security
• Analytics Cookies: Help us understand how you use the platform
• Preference Cookies: Remember your settings and preferences
• Performance Cookies: Monitor and improve platform performance

InboxUni is operated from the United States. If you are accessing the platform from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws, including GDPR for European users.

InboxUni is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice within the platform

Your continued use of InboxUni after changes are posted constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Additional Information for Specific Regions

12.1 European Economic Area (EEA) - GDPR

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

12.2 California - CCPA

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights