Privacy Policy

Inboxlyone (“we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services.

1. Information We Collect

• Account information: name, email address, and profile picture when you connect Google or Facebook/Instagram.
• Authentication data: access tokens and refresh tokens to enable secure integrations with Gmail, Facebook Messenger, and Instagram Messaging APIs.
• Content data (only as needed to provide the service):
  • Gmail: message metadata (subject, sender, recipient) and message content you choose to view/manage in Inboxlyone.
  • Facebook Messenger: conversations/messages for connected Pages you choose to manage.
  • Instagram: Direct Messages (DMs) for connected Instagram Business/Creator accounts linked to your Facebook Page; basic account info such as username, account ID, and profile picture; and message metadata/content you choose to view/manage.

2. How We Use Information

We use your information to provide and improve the Inboxlyone service, connect and manage your Gmail, Facebook Messenger, and Instagram accounts, troubleshoot issues, and communicate with you about updates. We do not sell your data.

3. Legal Basis (GDPR)

If you are in the European Economic Area (EEA), we process your information under the following legal bases: with your consent (when you connect the integrations), to perform our contract with you (providing the service), and to comply with legal obligations.

4. Data Storage and Security

Data is stored securely using Supabase and industry-standard encryption. Tokens are encrypted and restricted to service use. We take reasonable measures to protect your data but cannot guarantee absolute security.

5. Your Rights

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Withdraw your consent and disconnect integrations at any time.
• Lodge a complaint with your local data protection authority.

6. Permissions & How to Revoke Access

Integrations use the following platform permissions only to provide the features you choose:

• Google (Gmail): e.g., gmail.modify, gmail.send. You can revoke access in your Google Account → Security → Third-party access.
• Facebook/Instagram: e.g., pages_messaging, pages_show_list,instagram_basic, instagram_manage_messages. Revoke in Facebook → Settings & Privacy → Business Integrations (or Linked Accounts for Instagram Business/Creator).

7. Data Retention

We keep your data only as long as necessary to provide the service. You may request deletion at any time by contacting us or by disconnecting integrations.

8. Changes to This Policy

We may update this Privacy Policy. Updates will be posted on this page with a new “Last Updated” date.

9. Contact

If you have questions about this Privacy Policy, contact us at:
support@inboxly.one