Privacy Policy
We update this policy regularly to keep you informed. Last updated: December 15, 2025
Privacy at a Glance
Table of Contents
1. Introduction
Key Points:
- • This policy explains how we handle your data
- • By using Inboop, you agree to this policy
Welcome to Inboop ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered CRM platform for social commerce.
By accessing or using Inboop, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the application.
2. Information We Collect
Key Points:
- • Personal info you provide (name, email, business details)
- • Social media data when you connect accounts
- • Automatic data (device info, usage patterns)
2.1 Personal Information
We may collect personally identifiable information that you voluntarily provide, including:
- Name and email address
- Business name and contact information
- Account credentials
- Payment information (processed securely through third-party providers)
2.2 Social Media Data
When you connect your social media accounts (Instagram, WhatsApp, Facebook Messenger), we collect:
- Messages and conversations from connected platforms
- Profile information of your customers (as permitted by each platform)
- Business account information and page data
- Engagement metrics and analytics
2.3 Automatically Collected Information
We automatically collect certain information when you use our service:
- Device information and browser type
- IP address and location data
- Usage patterns and preferences
- Cookies and similar tracking technologies
3. Legal Basis for Processing
Key Points:
- • We process data to provide our service (contract)
- • We ask consent where required by law
- • You can withdraw consent anytime
We process your personal data under the following legal bases as required by GDPR and other applicable laws:
- Contractual Necessity: Processing is necessary to provide our services and fulfill our contract with you (e.g., managing your CRM account, processing conversations)
- Consent: Where required by law, we obtain your explicit consent before processing (e.g., marketing communications, optional analytics)
- Legitimate Interests: Processing for our legitimate business interests, such as improving our services, fraud prevention, and security, where these interests do not override your rights
- Legal Obligations: Processing necessary to comply with applicable laws and regulations
You may withdraw your consent at any time by contacting us at privacy@inboop.com or through your account settings.
4. How We Use Your Information
Key Points:
- • Provide and improve our CRM service
- • AI-powered message classification
- • Security and fraud prevention
We use the collected information for various purposes:
- To provide and maintain our CRM service
- To process and manage your customer conversations
- To use AI/ML technologies for message classification and insights
- To improve and personalize your experience
- To communicate with you about updates and support
- To detect and prevent fraud or security issues
- To comply with legal obligations
6. Data Sharing and Disclosure
Key Points:
- • We never sell your personal data
- • Shared only with essential service providers
- • Legal disclosure only when required
We do not sell your personal information. We may share your data in the following circumstances:
- Service Providers: With trusted third parties who assist in operating our platform
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize us to share information
7. International Data Transfers
Key Points:
- • Data hosted on AWS (United States)
- • Protected by Standard Contractual Clauses
- • Encrypted in transit and at rest
Your data may be transferred to and processed in countries other than your own. Specifically:
- Cloud Infrastructure: We use Amazon Web Services (AWS) with servers located in the United States
- Third-Party Services: Meta platforms (Instagram, Facebook, WhatsApp) may process data in various locations according to their policies
When transferring data internationally, we implement appropriate safeguards including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data processing agreements with all service providers
- Technical security measures including encryption in transit and at rest
8. Data Security
Key Points:
- • Industry-standard encryption
- • Regular security assessments
- • Secure server infrastructure
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
9. Data Retention
Key Points:
- • Clear retention periods for each data type
- • Data deleted or anonymized after expiry
- • Request early deletion anytime
We retain your data for specific periods based on the type of information and purpose:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + 30 days after deletion |
| Conversation data | 24 months from last activity, or until account deletion |
| Lead information | 24 months from creation, or until account deletion |
| Analytics and logs | 12 months |
| Payment records | 7 years (legal requirement) |
| Support communications | 36 months from resolution |
After the retention period expires, data is securely deleted or anonymized. You may request early deletion of your data at any time, subject to legal retention requirements.
10. Your Rights
Key Points:
- • Access, correct, or delete your data
- • Export your data in portable format
- • We respond within 30 days
Depending on your location (including under GDPR, CCPA, and other privacy laws), you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete information
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for marketing
- Right to Withdraw Consent: Withdraw previously given consent at any time
How to Exercise Your Rights
To exercise any of these rights, you can:
- Email us: Send a request to privacy@inboop.com
- Account Settings: Use the data management options in your account dashboard
We will respond to your request within 30 days. In complex cases, we may extend this by an additional 60 days, and we will notify you if this is necessary. We may need to verify your identity before processing your request.
11. Third-Party Services
Key Points:
- • We integrate with Meta (Instagram, Facebook, WhatsApp)
- • Third-party policies apply to their services
Our service integrates with third-party platforms including Meta (Instagram, Facebook, WhatsApp). Your use of these platforms is governed by their respective privacy policies. We encourage you to review the privacy policies of any third-party services you connect to Inboop.
12. Children's Privacy
Key Points:
- • Service not intended for users under 18
- • We delete data if collected from minors
Inboop is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.
13. Changes to This Policy
Key Points:
- • We'll notify you of material changes via email
- • Check the "Last updated" date for recent changes
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will notify you via email or through a prominent notice on our service. You are advised to review this Privacy Policy periodically for any changes.
14. Contact Us
If you have any questions about this Privacy Policy, want to exercise your rights, or have concerns about our data practices, please contact us at:
Inboop - Data Protection
privacy@inboop.comhttps://inboop.comResponse Time: Within 30 days