Privacy Policy

1. Who we are

Inboks is owned and operated by Lunik L.L.C. This policy explains how we handle personal information collected through the Inboks website, app, account registration, plan requests, and related communications.

Questions and privacy requests can be sent toinfo@inboks.app.

2. Information we collect

When you visit the website, create an account, or purchase a subscription, we may collect:

• Your name, business name, and email address.
• The communication channels your business connects and information you provide during signup.
• Language, approximate country, time zone, browser preferences, and the page used to register.
• Campaign information such as UTM parameters and advertising click identifiers when present in the registration URL.
• Analytics information such as pages viewed, approximate location, device details, signup, trial, and purchase activity when you allow optional analytics.
• Plan requests, billing contact details, invoice information, and non-sensitive payment or transaction references.
• Technical information needed to operate, secure, and troubleshoot the website and forms.

3. How we use information

We use this information to:

• Create and manage your Inboks account and workspace.
• Review plan requests, issue invoices, reconcile confirmed payments, and provide paid access.
• Send account, billing, product, and service-related communications.
• Understand how businesses use Inboks and improve the product.
• Measure campaign performance, prevent abuse, and maintain the security and reliability of the service.
• Comply with applicable legal obligations and respond to valid requests.

Depending on the context and applicable law, we process information with your consent, to provide the service you requested, and for legitimate interests such as product planning, security, and measuring the effectiveness of our communications.

4. Google services and Gmail data

When a workspace administrator chooses to connect Gmail, Inboks requests Google account email, read-only Gmail access, and permission to send Gmail messages. Inboks uses this access only to identify the connected mailbox, import recent Inbox and Sent threads into that workspace, show those conversations to authorized workspace members, retrieve an attachment when an authorized member opens it, and send replies or forwards that the member initiates through Inboks.

Imported message bodies, headers, participant addresses, timestamps, thread identifiers, and attachment metadata are stored with the customer workspace so the shared inbox can operate. Google access and refresh tokens are encrypted at rest. Gmail data is not sold, used for advertising, used to determine creditworthiness, or used to train generalized artificial intelligence models. It is shared only with authorized members of the connected workspace and service providers needed to operate and secure Inboks under confidentiality obligations.

A workspace administrator can disconnect Gmail at any time. Disconnecting removes the stored Google tokens and deletes Gmail conversations and messages imported into that workspace. Users can also revoke Inboks access from their Google Account permissions. Inboks's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.

5. Service providers and advertising tools

We use service providers to host the website and app, process registrations and plan requests, and send email. These may include Cloudflare and Resend, which process information under their contractual and security obligations.

Paddle is the authorized reseller and merchant of record for paid online subscriptions. During checkout and subscription management, Paddle may collect and process contact, billing, transaction, device, fraud-prevention, and tax information to complete orders, manage subscriptions, issue receipts or invoices, prevent fraud, provide buyer support, and meet legal obligations. Paddle may share limited order and customer information with Inboks for service fulfilment, reconciliation, fraud prevention, and product support. Paddle acts under its ownprivacy notice. Card details are entered through Paddle Checkout and are not collected or stored by Inboks.

We may use Google Tag Manager, Google Analytics, and advertising tools to measure visits, registrations, trials, and purchases. These optional browser-based tools load only after you allow analytics, and you can change that choice using the Privacy choices control. Campaign parameters included in a link may be stored with a account or transaction record even when browser-based measurement is not enabled.

We do not sell personal information.

6. Retention and security

We retain account, attribution, and plan-request information while it is needed to manage access, communicate with you, issue and retain required business records, reconcile payments, and meet legal or security requirements. We delete or anonymize information when it is no longer needed, subject to limited backup and legal-retention periods.

We use reasonable technical and organizational measures to protect information, but no online service can guarantee absolute security.

7. Your choices and rights

You may ask to access, correct, delete, or restrict the use of your information, or withdraw consent where applicable. Rights vary by location and may be subject to legal exceptions.

See our Data Deletion Instructionsor email info@inboks.app.

8. International processing and children

Our service providers may process information in countries other than your own. Where required, we use appropriate safeguards for such processing. Inboks is intended for business users aged 18 or older.

9. Changes to this policy

We may update this policy as Inboks develops. The date at the top identifies the latest version. Material changes will be communicated where required.