1. Summary
InboxIQ (“we,” “us”) is an email deliverability and engagement analytics app that connects to your CRM and your sending provider. This policy explains the information we handle, how we use it, and the choices you have. We operate the Service as described in our Terms of Service.
2. Information we collect
Information you provide.
- Your email address, used as your account identity and for magic-link sign-in and license delivery.
- Your choice of sending provider flavor (LC Email or Mailgun) for single-license provisioning.
- Billing details managed by our payment processor. We receive limited billing metadata (such as subscription status and the last four digits of a card) but never the full card number.
Information from your connected accounts.
- Deliverability, engagement, and campaign metadata from your CRM and sending provider. This data is used to compute the analytics shown in your dashboard.
- License and API keys needed to provision and validate your install. Keys are stored hashed and encrypted, and the full key is shown only after a fresh session re-verification.
Information collected automatically.
- Basic usage and analytics events (page views, checkout starts) via analytics and advertising tools you can control in your browser.
- Session cookies for authentication. These are httpOnly, Secure, and SameSite=Lax, and expire after a fixed period.
3. How we use information
- To authenticate you and keep your session secure.
- To provision, validate, and recover your licenses.
- To send sign-in links, license keys, and essential account notices.
- To compute and display your analytics and lifecycle insights.
- To process payments, manage subscriptions, and issue invoices.
- To detect abuse and protect the Service.
- To improve the product and respond to support requests.
We do not sell your information. We do not use the contents of your email campaigns for advertising targeting.
4. Legal bases
We process information on the following bases: to perform our contract with you (providing the Service and billing), to comply with legal obligations, and for our legitimate interests in security, fraud prevention, and product improvement. Where required, we rely on your consent, which you can withdraw.
6. Retention
We keep account, billing, and license records for as long as needed to provide the Service and meet legal and tax obligations. License and billing records are retained additively; we do not delete records needed to preserve your account and license history. You can request deletion of your account data where law requires it, subject to these retention needs.
7. Security
We protect keys with hashing and encryption, enforce session timeouts, require step-up verification for sensitive actions, and fail closed when security configuration is missing. No method is perfectly secure, but we work to protect your information using reasonable administrative, technical, and physical safeguards.
8. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can manage your account and connected data from your dashboard. To exercise these rights, email support@myinboxiq.com. We will verify your identity before acting.
10. International transfers
Your information may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers.
11. Children
The Service is not directed to children under 16 (or the applicable age), and we do not knowingly collect their information. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to this policy
We may update this policy. Material changes will be posted here with an updated date. Continued use after changes take effect means you accept the revised policy.
13. Contact
For privacy questions or requests, email support@myinboxiq.com. We will respond within the timeframe required by applicable law.
