Privacy Policy

Last Updated: January 31, 2026

Introduction

This Privacy Policy ("Policy") applies to all visitors and users of services and websites operated by Inboxi ("Inboxi", "we", or "us"). By accessing or using any part of our websites, hosted services, or self-managed installations, you agree to this Policy and our practices related to your personal data.

Data Protection

Inboxi handles oversight of data security internally. For modifications, deletions, or concerns regarding personal data, please email us at support@inboxi.app.

Information We Collect and Why

Website Visitors

We collect basic information such as browser type, language preference, referring site, and access timestamps to understand usage patterns, improve services, and ensure security. IP addresses may also be collected, but not used for identification. We may compile anonymized, aggregated data to report usage trends (e.g., total downloads).

Self-Managed Instances

For self-hosted deployments of our software, Inboxi may collect anonymous usage data (you may disable this tracking via app configuration).

Personally Identifying Information

Users may voluntarily share personal details such as name, email, and organization information when interacting with Inboxi (e.g., signing up, submitting support requests, or feedback). We collect only the data necessary for the interaction's purpose.

Sensitive data (e.g., health, religious, or financial details) is not intentionally collected. If users store such data via our services, they do so at their own discretion.

Use of Facebook Platform Data (Required by Meta)

When you use our application with Facebook Login or other Meta APIs, we may collect the following Facebook profile information (depending on the permissions you grant):

Name
Email address
Profile picture
Pages you manage (if permission granted)
Messages or other content (only if permission is granted for app functionality)

We use this data solely to:

Authenticate your identity
Provide and personalize our services
Display relevant account and page information inside the app
Enable requested features, such as sending messages on your behalf or retrieving analytics

You can revoke our app's access to your Facebook information at any time via your Facebook account settings.

Facebook Permissions and Their Purpose

pages_show_list

Purpose: Fetches the list of Facebook Pages the user manages.

Why it's needed: Allows users to select which Page they want to connect to Inboxi for Messenger support.

pages_messaging

Purpose: Enables the app to send and receive messages on behalf of a connected Facebook Page via Messenger.

Why it's needed: Provides the core functionality that allows agents to respond to customer messages.

pages_manage_metadata

Purpose: Allows the app to subscribe to and receive Messenger webhook events for a Facebook Page (e.g., new messages, delivery receipts).

Why it's needed: Ensures real-time message delivery and updates between Messenger and the Inboxi Inbox.

business_management

Purpose: Grants the app access to Business Manager assets and verifies Page ownership.

Why it's needed: Supports secure onboarding by confirming that the Page is properly managed by the user's Business account before connecting it to the Inbox.

business_asset_user_profile_access

Purpose: Retrieves the name, profile picture, and IDs of users who message the connected Page.

Why it's needed: Displays customer identity inside Inboxi so agents know who they’re talking to, improving response personalisation.

Instagram Permissions and Their Purpose

instagram_business_basic

Purpose: Allows the app to read basic information about the user's Instagram Professional account (Business or Creator), including username, profile picture, account type, and follower/following counts.

Why it's needed: Enables users to connect and identify their Instagram Professional account within Inboxi, and displays account information in the Inbox for context during customer interactions.

instagram_manage_messages

Purpose: Enables the app to send and receive Instagram Direct messages on behalf of the connected Instagram Professional account.

Why it's needed: Provides the core functionality that allows agents to respond to customer messages received via Instagram Direct, directly from the Inboxi Inbox.

We do not sell, rent, or share your Facebook data with third parties for marketing purposes.

Legal Basis for Data Processing

Contract performance: Providing access to services.
Legitimate interest: Improving services, fraud prevention.
Consent: Marketing emails (unsubscribe anytime).

Use of AI and Machine Learning

We do not use your data to train general-purpose AI/ML models. If integrated with services like OpenAI, data is processed only for requested features.

Data Sharing and Protection

We only share personal data with:

Employees and contractors under confidentiality agreements
Legal authorities, if required

We implement industry-standard protections (encryption, access controls, audits) to safeguard data.

Data Location and International Transfers

Data may be stored or processed globally. Where applicable (e.g., GDPR), your consent will be obtained explicitly.

Communication

You may receive administrative or product-related emails. Marketing emails can be opted out from. We may publish anonymized or generalized user feedback to support other users.

Cookies and Tracking

We use cookies and third-party analytics for performance monitoring. You may disable cookies in your browser, though some features may be limited.

Subscription and Payments

Certain features of the Services may require a paid subscription. Pricing, billing, and renewal terms will be disclosed at the time of subscription. All fees are non-refundable unless otherwise stated.

Global Privacy Practices

We comply with global standards such as:

Data minimization
Right to access, correct, or delete data
Consent-based processing (where applicable)

Your Rights (Including GDPR)

Right to access and correct personal data
Right to deletion ("right to be forgotten")
Right to object to processing
Right to withdraw consent
Right to data portability (if applicable)

Data Retention

We retain personal data as long as necessary for service delivery or legal compliance. Public contributions (e.g., forums, GitHub issues) may remain visible after account deletion.

Changes to This Policy

Inboxi may update this Policy occasionally. Changes will be posted here and, for material updates, may be emailed to registered users.

Contact Us

For questions about this policy, contact: support@inboxi.app