This Privacy Policy explains how InboxEd collects, uses, stores, and shares information when you visit our website or use the InboxEd platform, a software service that helps businesses manage customer conversations through the WhatsApp Business Platform.
1. Who this policy applies to
This policy applies to businesses and organizations that create an InboxEd workspace ("Customers"), the team members they invite ("Users"), and visitors to our website. Customers use InboxEd to communicate with their own end customers. When we process messages and contact details on a Customer's behalf, we do so according to the Customer's instructions, and the Customer is responsible for having a lawful basis to communicate with its end customers.
2. Information we collect
- Account information: names, business email addresses, phone numbers, organization name, and login credentials of Users.
- WhatsApp Business information: when a Customer connects its WhatsApp Business Account through Meta's onboarding flow, we receive the identifiers and access permissions the Customer authorizes, such as the WhatsApp Business Account ID, business phone number ID, and access tokens.
- Conversation data: messages, media, and related metadata sent and received through the Customer's connected WhatsApp Business number, along with end-customer names and phone numbers.
- Workspace data: assignments, notes, labels, conversation statuses, and other information Users add in InboxEd.
- Technical information: IP address, browser type, device information, and log data generated when the website or platform is used.
3. How we use information
- To provide the InboxEd service, including sending, receiving, displaying, and organizing WhatsApp conversations for Customers.
- To authenticate Users and apply organization-based access and team permissions.
- To maintain, secure, troubleshoot, and improve the platform.
- To communicate with Customers about their account, support requests, and changes to the service.
- To comply with legal obligations and enforce our Terms of Service.
We do not sell personal information, and we do not use Customers' conversation data for advertising.
4. Data received from Meta
InboxEd accesses Meta's WhatsApp Business Platform only with the permissions a Customer grants during onboarding. We use data received through Meta's APIs solely to provide the InboxEd service to that Customer, and we handle it in accordance with Meta's platform terms and policies. The Customer remains the owner of its Meta Business Portfolio, WhatsApp Business Account, and phone number, and may revoke InboxEd's access at any time from its Meta Business settings.
5. How we share information
We share information only as needed to operate the service:
- With Meta, to send and receive messages through the WhatsApp Business Platform on the Customer's behalf.
- With service providers that host and support our infrastructure, under obligations to protect the information.
- When required by law, or to protect the rights, safety, and security of InboxEd, our Customers, or others.
6. Data retention
We keep account and conversation data for as long as the Customer's workspace is active, or as needed to provide the service. When a workspace is closed or a deletion request is received, we delete or anonymize the related data within a reasonable period, except where we must keep certain records to meet legal obligations.
7. Data deletion requests
Customers can request deletion of their workspace and associated data, including data received from Meta, by emailing hi@inboxed.in from the account owner's email address with the subject "Data deletion request". We will confirm the request and let you know when deletion is complete. End customers who have messaged a business through InboxEd should contact that business directly, and we will support the business in responding.
8. Security
We use organization-based access controls, team permissions, and authenticated sessions to limit access to workspace data. No method of transmission or storage is completely secure, but we work to protect information against unauthorized access, loss, and misuse.
9. Your choices and rights
Depending on where you are located, you may have the right to access, correct, delete, or restrict the use of your personal information. To make a request, contact us using the details below. If your information is held by a business that uses InboxEd, we may refer your request to that business.
10. Cookies
We use cookies and similar technologies as described in our Cookie Policy.
11. Changes to this policy
We may update this policy from time to time. When we do, we will revise the effective date above and, for material changes, notify Customers through the platform or by email.
12. Contact us
For questions about this policy or your information: