Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Last updated: February 14, 2026
Inbox Labs ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered WhatsApp and social media automation platform (the "Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the service.
Information We Collect
Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Register for an account (name, email address, phone number)
- Connect your WhatsApp Business
- Configure your AI agent settings and business information
- Upload FAQ documents or training materials
- Contact our customer support team
- Subscribe to our newsletters or marketing communications
Conversation Data
As part of providing our Service, we process messages and conversations between you and your customers through connected messaging platforms (WhatsApp, Instagram DMs, Facebook Messenger). This includes message content, timestamps, sender information, and conversation metadata necessary for AI processing and automation.
Usage Data
We automatically collect certain information when you visit, use, or navigate the Service. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Service, and other technical information.
How We Use Your Information
We use the information we collect or receive for various purposes, including:
- Provide and maintain our Service: To operate, maintain, and improve our AI automation platform and related services.
- AI Processing: To enable AI-powered responses, lead qualification, appointment booking, and conversation management.
- Account Management: To create and manage your account, process payments, and provide customer support.
- Communication: To send you technical notices, updates, security alerts, and support messages.
- Analytics: To monitor and analyze trends, usage, and activities in connection with our Service.
- Marketing: To send you promotional communications about new features, special offers, or other information we think you may find interesting (you can opt-out at any time).
- Security: To detect, prevent, and address technical issues, fraud, and unauthorized access.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
Data Sharing and Disclosure
We may share your information in the following situations:
With Your Consent
We may disclose your personal information for any purpose with your explicit consent.
Service Providers
We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work.
Legal Requirements
We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
Vital Interests
We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation.
Data Security
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.
Our security measures include:
- Encryption of data in transit using TLS/SSL
- Encryption of sensitive data at rest
- Regular security assessments and penetration testing
- Access controls and authentication mechanisms
- Employee security training and confidentiality agreements
- Compliance with industry-standard security frameworks
Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
- Access: You have the right to request copies of your personal information.
- Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Erasure: You have the right to request that we erase your personal information, under certain conditions.
- Restrict Processing: You have the right to request that we restrict the processing of your personal information, under certain conditions.
- Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
- Object to Processing: You have the right to object to our processing of your personal information, under certain conditions.
To exercise these rights, please contact us using the information provided in the Contact Us section below.
Third-Party Services
Our Service integrates with various third-party services to provide functionality:
- WhatsApp Business API: For WhatsApp messaging functionality. Subject to Meta's privacy policy.
- OpenAI: For AI processing and natural language understanding. Subject to OpenAI's privacy policy.
- Stripe: For payment processing. Subject to Stripe's privacy policy.
- Supabase: For data storage and authentication. Subject to Supabase's privacy policy.
We encourage you to review the privacy policies of these third-party services to understand how they handle your data.
Data Retention
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.
Children's Privacy
Our Service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take necessary actions.
International Data Transfers
Your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data to the United States and process it there.
Updates to This Policy
We may update this privacy policy from time to time in order to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date. You are advised to review this privacy policy periodically for any changes.