Privacy Policy

1. Introduction

OneInbox ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our automated CRM and business messaging platform that integrates with WhatsApp Business API, Telegram, Discord, and other communication channels.

Business Contact Information:

• Business Name: OneInbox
• Email: ahmed.elsayed478@outlook.com
• Phone: +20 109 694 7459
• Address: 307 شارع ترعة الجبل, القاهرة, 11311, Egypt

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Name, email address, phone number, company name, and billing information
• Profile Information: Profile pictures, business descriptions, and preferences
• Communication Data: Messages, media files, and attachments you send or receive through our platform
• Customer Data: Contact information and interaction history of your customers stored in the CRM

2.2 Information Collected Automatically

When you use our services, we automatically collect certain information:

• Usage Data: Features used, time spent, message volume, and interaction patterns
• Device Information: IP address, browser type, operating system, and device identifiers
• Log Data: Access times, pages viewed, and system activity
• Cookies and Tracking: See our Cookie Policy section below

2.3 Information from Third Parties

We receive information from integrated third-party services:

• WhatsApp Business API: Phone numbers, message content, delivery status, and metadata
• Telegram: User IDs, chat history, and media files
• Discord: Server IDs, channel data, and message content
• Other Integrations: Data from connected communication platforms as authorized by you

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our messaging and CRM platform
• Communication Management: To facilitate message routing, automation, and unified inbox functionality
• CRM Functionality: To store and manage customer relationships, interaction history, and analytics
• Authentication: To verify your identity and secure your account
• Customer Support: To respond to your inquiries and provide technical assistance
• Analytics: To understand usage patterns and improve our services
• Compliance: To comply with legal obligations and enforce our Terms of Service
• Marketing: To send promotional communications (with your consent)

4. Data Storage and Security

4.1 Data Storage

Your data is stored on secure servers located in data centers that comply with industry standards. We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

4.2 Security Measures

• End-to-end encryption for message transmission
• Encrypted data storage using industry-standard algorithms
• Secure API connections with authentication tokens
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection and privacy

4.3 Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active and for 90 days after account closure
• Message Data: Retained according to your configured retention settings (default: 12 months)
• CRM Data: Retained while your account is active or until you request deletion
• Legal Requirements: Certain data may be retained longer to comply with legal, regulatory, or contractual obligations

5. Third-Party Integrations

5.1 Meta / WhatsApp Business API

Our platform integrates with Meta's WhatsApp Business API. When you use this integration:

• Messages are transmitted through Meta's infrastructure according to their privacy policy
• Phone numbers and message metadata are shared with Meta as required by the API
• You must comply with WhatsApp Business Policy and Commerce Policy
• We process data as a service provider on your behalf

5.2 Other Communication Platforms

Similar data sharing occurs with Telegram, Discord, and other integrated platforms. Each platform has its own privacy policy that governs their data handling practices.

5.3 Service Providers

We may share your information with trusted third-party service providers who assist us in:

• Cloud hosting and infrastructure (e.g., AWS, Azure, Google Cloud)
• Payment processing
• Email delivery services
• Analytics and monitoring tools
• Customer support platforms

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data (see Data Deletion section below)
• Portability: Request a copy of your data in a machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing of your data for certain purposes
• Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, please contact us at ahmed.elsayed478@outlook.com.

7. Data Deletion

You have the right to request deletion of your personal data. For detailed instructions, please visit our Data Deletion page.

To request data deletion:

• Send an email to ahmed.elsayed478@outlook.com with the subject "Data Deletion Request"
• Include your account email address and any relevant account identifiers
• We will process your request within 30 days
• You will receive confirmation once deletion is complete

Please note that some data may be retained as required by law or for legitimate business purposes (e.g., financial records for tax compliance).

8. Cookie Policy

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and understand how our platform is used.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly (e.g., authentication, security)
• Performance Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (only with your consent)

8.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block cookies from specific websites
• Block all cookies

Note that blocking cookies may affect the functionality of our platform.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those of your jurisdiction. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of material changes by:

• Posting the updated Privacy Policy on our website
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Your continued use of our services after changes indicates acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. GDPR Compliance (for EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process data based on consent, contractual necessity, legal obligations, or legitimate interests
• Data Protection Officer: Contact us at ahmed.elsayed478@outlook.com for data protection inquiries
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local supervisory authority
• Automated Decision Making: We use automated systems for message routing and chatbot responses; you can request human review