Privacy Policy

InboxCenter is a product of Techydox ("Techydox", "InboxCenter", "we", "us"). This Privacy Policy explains how we collect, use, share, and protect information when you use our website and our WhatsApp inbox, CRM, automation, and billing platform (the "Service"). It applies to visitors of our marketing site, to the businesses that sign up for an account ("Customers"), and — where noted — to the end-customers Customers message through the Service.

By using the Service, you agree to the collection and use of information as described here. If you do not agree, please do not use the Service.

1. Information we collect

We collect the following categories of information:

• Account information: name, email address, password (hashed), organization name, and role, provided when you sign up or are invited to a workspace.
• WhatsApp Business data: once you connect a WhatsApp number, we process the conversations, contact phone numbers, message content and media, and delivery/read status needed to operate your shared inbox, automations, and flows.
• CRM and business data: contacts, tags, notes, deal and pipeline records, broadcast lists, and subscription/customer records you or your team create in the Service.
• Billing information: plan, billing address, and transaction records. Card and payment details are collected and processed directly by our payment processor, Razorpay — we do not store full card numbers.
• Usage and device data: log data, IP address, browser type, pages visited, and similar diagnostic information collected automatically when you use the Service.
• Cookies: small files used to keep you signed in and to remember basic preferences. We do not use cookies for third-party advertising.

2. How we use information

• To provide, operate, and maintain the Service, including the shared inbox, contacts, pipelines, broadcasts, automations, and flow builder.
• To process payments and manage subscriptions, upgrades, and renewals.
• To send account, billing, and service-related notifications (for example, trial expiry reminders or renewal reminders).
• To provide customer support and respond to inquiries.
• To monitor, secure, and improve the Service, including detecting abuse and preventing fraud.
• To comply with legal obligations.

We do not sell personal information, and we do not use Customer or end-customer conversation data to train third-party AI models beyond what is described in Section 4.

3. WhatsApp and messaging data

The Service connects to the WhatsApp Business Platform, operated by Meta, to send and receive messages on behalf of Customers. Meta processes message data as part of delivering messages and is subject to its own privacy terms. Customers are responsible for having a lawful basis (such as opt-in consent) to message their contacts, and for complying with WhatsApp's Business Messaging Policy.

Where a Customer connects a Google account to import a Google Sheet (for use in the flow builder), we request only the narrow scope needed to read or write the specific spreadsheet selected via Google's picker, and store an access/refresh token to keep that connection working. We do not access other files in the Customer's Google Drive.

4. AI features

If a Customer enables AI-drafted or AI-sent replies, or the AI agent flow node, relevant conversation content and business context are sent to the Customer's configured AI provider (for example OpenAI or Anthropic) to generate a response. This only happens for accounts that have explicitly configured and activated an AI provider. We do not control, and are not responsible for, those providers' own data handling beyond passing requests through on the Customer's behalf.

5. Who we share information with

We share information only with service providers who help us operate the Service ("subprocessors"), under confidentiality and data-protection obligations, including:

• Meta / WhatsApp Business Platform — message delivery.
• Supabase — database hosting, authentication, and file storage.
• Razorpay — payment processing and billing.
• Google — Sheets/Drive access, only for Customers who connect it.
• AI providers (OpenAI, Anthropic) — only for Customers who enable AI features.
• Email delivery providers — for transactional and account emails.
• Hosting and infrastructure providers (Vercel) — to run the application.

We may also disclose information if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets, subject to the same protections described here.

6. Data retention

We retain account, conversation, and CRM data for as long as an account is active, and for a reasonable period afterward to allow reactivation, comply with legal or accounting obligations, and resolve disputes. You can request deletion of your account and associated data as described in Section 8.

7. Data security

We use industry-standard measures to protect data, including encryption in transit (HTTPS/TLS), encrypted storage of sensitive credentials such as WhatsApp and Google access tokens, per-workspace data isolation, and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you are located, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise any of these rights, contact us at privacy@inboxcenter.co. If your data was provided to us by a business you interacted with on WhatsApp, please also contact that business directly, as they control their own contact data.

9. Children's privacy

The Service is intended for business use and is not directed at children. We do not knowingly collect personal information from children under 16.

10. International data transfers

We are based in India, and our infrastructure and service providers may process data outside your country of residence. Where this happens, we rely on our providers' own safeguards for cross-border transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and, where appropriate, by notifying account owners directly.

12. Contact us

Questions about this Privacy Policy can be sent to privacy@inboxcenter.co or via our contact page.