Privacy Policy

1. Introduction

At InboxGo ("we", "us", or "our"), we are committed to protecting your privacy and maintaining the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email service ("Service").

By using InboxGo, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address: Your chosen @inboxgo.pro email address
• Password: Securely hashed using bcrypt or similar algorithm (never stored in plain text)
• Registration date: When your account was created
• Invite code: The code used during beta registration (anonymized after verification)

2.2 Email Content and Metadata

To provide the email service, we store:

• Email messages: Content, subject lines, and attachments of emails you send and receive
• Email headers: Sender, recipient, timestamps, and routing information
• Mailbox organization: Folder structure, labels, and read/unread status
• Draft emails: Temporarily saved draft messages

Important: We do not read, scan, or analyze your email content for advertising, marketing, or any purpose other than providing the Service. Your emails are encrypted at rest and in transit.

2.3 Usage and Technical Information

To maintain and improve the Service, we automatically collect:

• Login information: Timestamps and IP addresses of login attempts
• Device information: Browser type, operating system, and device identifiers
• Service interactions: Features used, error reports, and performance data
• Session data: Authentication tokens and session duration

2.4 Information We Do NOT Collect

We do not:

• Track your browsing activity outside of InboxGo
• Use advertising or analytics cookies
• Collect biometric data or precise geolocation
• Access your contacts without explicit permission
• Monitor the content of your emails for advertising purposes

3. How We Use Your Information

3.1 Service Provision

• Deliver, route, and store your emails
• Authenticate your access to your account
• Maintain mailbox organization and user preferences
• Enable search and filtering functionality
• Process attachments and format email display

3.2 Service Improvement and Security

• Detect and prevent spam, phishing, and malware
• Identify and prevent fraudulent or abusive activities
• Monitor system performance and reliability
• Debug errors and improve user experience
• Conduct security audits and vulnerability assessments

3.3 Communication

• Send critical service notifications (password resets, security alerts)
• Respond to support requests and inquiries
• Provide updates about the Service during beta
• Notify you of Terms or Privacy Policy changes

3.4 Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and prevent harm
• Enforce our Terms of Service

4. Information Sharing and Disclosure

4.1 Our Core Promise

We will never sell, rent, or share your personal information or email content with third parties for marketing purposes.

4.2 Service Providers

We may share limited data with trusted service providers who assist us in operating the Service, including:

• Infrastructure providers: Hosting and storage services
• Security services: DDoS protection and threat detection
• Support tools: Customer service platforms

These providers are contractually obligated to protect your data and may only use it for the specific services they provide to us.

4.3 Legal Requirements

We may disclose your information when required by law or in response to:

• Valid legal process (subpoenas, court orders, warrants)
• Government or regulatory requests
• Emergency situations involving danger of death or serious physical injury

When legally permitted, we will notify you of such requests and provide you with a copy of the demand.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. You will be notified of any such change and your options regarding your data.

5. Data Security

5.1 Encryption

• In transit: TLS 1.3 encryption for all connections
• At rest: AES-256 encryption for stored emails and attachments
• Passwords: Bcrypt hashing with salt
• Backups: Encrypted backup storage

5.2 Access Controls

• Role-based access control for employees
• Multi-factor authentication for administrative access
• Audit logging of all data access
• Regular access reviews and principle of least privilege

5.3 Security Practices

• Regular security audits and penetration testing
• Automated vulnerability scanning
• Incident response plan and procedures
• Employee security training
• Physical security controls for infrastructure

5.4 Breach Notification

In the unlikely event of a data breach affecting your information, we will notify you within 72 hours via email and provide details about the breach, affected data, and steps we are taking to address it.

6. Data Retention and Deletion

6.1 Active Accounts

We retain your account information and emails for as long as your account remains active and for a reasonable period thereafter to:

• Allow you to restore access if needed
• Comply with legal retention requirements
• Resolve disputes and enforce our agreements

6.2 Account Deletion

When you delete your account:

• Immediate: Access to your account is revoked
• 30 days: All emails and personal data are permanently deleted
• 90 days: Anonymized logs and backups are purged

Some information may be retained in anonymized form for statistical purposes or to comply with legal obligations.

6.3 Inactive Accounts

Accounts inactive for 12 consecutive months will receive a notification. If no response is received within 60 days, the account may be deleted.

7. Your Privacy Rights

7.1 Access and Portability

You have the right to:

• Access all personal information we hold about you
• Export your emails in standard formats (MBOX, EML)
• Receive a copy of your account data in machine-readable format

7.2 Correction and Update

You can:

• Update your password and account settings at any time
• Request correction of inaccurate personal information

7.3 Deletion and Objection

You have the right to:

• Delete your account and all associated data
• Object to processing of your personal information
• Withdraw consent where processing is based on consent

7.4 Communication Preferences

• Opt out of non-essential service emails
• Choose notification preferences
• Control promotional communications (when available)

7.5 Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies and Tracking Technologies

8.1 Essential Cookies

We use only essential cookies necessary for:

• Authentication and session management
• Security and fraud prevention
• User preferences and settings

8.2 What We Don't Use

We do NOT use:

• Third-party tracking cookies
• Advertising cookies or pixels
• Analytics services that track individual users
• Social media tracking scripts

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. When we transfer data internationally, we ensure adequate protection through:

• Standard contractual clauses
• Adequacy decisions by regulatory authorities
• Your explicit consent

10. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete such information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect and how it is used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising these rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

• Right to access, rectification, and erasure
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our lawful basis for processing your data is primarily contract performance (providing the Service to you) and legitimate interests (security and service improvement).

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or for legal, operational, or regulatory reasons. Material changes will be communicated via:

• Email notification to your registered address
• Prominent notice in the Service interface
• Update to the "Last updated" date at the top of this page

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Third-Party Links

Emails you receive may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

15. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

• Privacy Team: [email protected]
• Data Protection Officer: [email protected]
• Website: https://inboxgo.pro

We are committed to resolving privacy concerns and will respond to all requests within 30 days.

16. Your Consent

By using InboxGo, you consent to this Privacy Policy and our processing of your information as described herein. If you do not agree, please do not use the Service.