Privacy Policy

1. Scope and roles

This Privacy Policy applies when Agent Inbox determines the purposes and means of processing personal information, including website visits, contact requests, beta applications, account administration, security, and business communications. When Agent Inbox processes Customer Content solely on a customer’s instructions, the customer is the controller or business and Agent Inbox acts as its processor or service provider.

This Policy does not govern independent third-party services or a customer’s own privacy practices.

2. Information we collect

• Contact information, including name, email address, company, and website.
• Communications and application information, including messages and descriptions of intended use.
• Account and authentication information, including name, email, credential records, sessions, and security events.
• Customer Content processed through Agent Inbox, including email content, attachments, contacts, agent instructions, memory, workflow data, outputs, and logs.
• Technical and usage data, including device, browser, IP address, timestamps, request metadata, diagnostic data, and interactions with the services.
• Commercial and administrative information, including plan, transaction, support, consent, and contractual records.

3. How we use information

• Provide, operate, maintain, secure, troubleshoot, and improve Agent Inbox.
• Review beta applications, respond to messages, administer accounts, and provide support.
• Authenticate users, prevent abuse, investigate incidents, enforce terms, and protect rights and safety.
• Process Customer Content according to customer instructions and enabled workflows.
• Comply with legal obligations, resolve disputes, and maintain business records.
• Send service-related communications and, where permitted, relevant product communications that recipients may opt out of.

4. Legal bases

Where applicable law requires a legal basis, processing is based on performance of a contract or steps requested before a contract, legitimate interests in operating and securing the services and communicating with users, compliance with legal obligations, consent where requested, or protection of vital interests. You may withdraw consent at any time without affecting prior lawful processing.

5. How information is disclosed

Agent Inbox may disclose information to infrastructure and service providers acting under contractual restrictions; customers and authorized account administrators; third parties you direct through enabled integrations; professional advisers; parties to a financing, merger, acquisition, reorganization, or asset transfer; and authorities or others when reasonably necessary to comply with law, enforce terms, investigate abuse, or protect rights, safety, and security.

Agent Inbox does not sell personal information for money and does not share personal information for cross-context behavioral advertising. Agent Inbox may use infrastructure and service providers under appropriate confidentiality, security, privacy, and data-protection commitments.

6. International transfers

Information may be processed in countries other than where you live. Where required, Agent Inbox uses recognized transfer mechanisms and contractual protections and assesses supplementary measures appropriate to the data and risk.

7. Security

Agent Inbox uses administrative, technical, and organizational safeguards designed to protect information, including access controls, authentication, encryption in transit, monitoring, and restricted service-provider access. No system is completely secure, and Agent Inbox cannot guarantee absolute security. You are responsible for protecting credentials and configuring agent permissions and integrations appropriately.

8. Retention

Agent Inbox retains personal information only as long as reasonably necessary for service delivery, security, legal compliance, dispute resolution, and enforcement. Contact submissions and beta applications are ordinarily retained for up to 24 months after the last meaningful interaction or application decision. Core account records are ordinarily retained while an account is active and for up to 90 days after closure, while authentication and security event records may be retained for up to 12 months.

Contracts, transaction records, tax records, and records needed to establish, exercise, or defend legal claims may be retained for up to seven years or longer where law requires. Deleted information may remain in encrypted, access-restricted backups for up to 35 additional days. Legal holds, fraud prevention, security investigations, technical recovery, or applicable law may require longer retention.

9. Cookies and similar technologies

Cookies are small text files stored by a browser. Similar technologies include local storage, session storage, and security tokens. Agent Inbox currently uses only cookies and similar technologies that are strictly necessary to operate requested features, maintain authenticated sessions, protect forms, prevent abuse, preserve security, and remember essential interface settings.

Agent Inbox does not currently use advertising cookies, cross-site behavioral tracking cookies, or non-essential analytics cookies. If that changes, this Policy and any legally required consent controls will be updated before those technologies are used where consent is required.

• Authentication and session cookies keep authorized users signed in and expire based on the configured session duration or when the user signs out.
• Security and request-integrity cookies or tokens help prevent unauthorized requests, fraud, and abuse.
• Cloudflare infrastructure may set or evaluate necessary security signals to deliver and protect the service.
• Browser settings can block or delete cookies, but blocking necessary cookies may prevent sign-in, form protection, or other essential functionality.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information; withdraw consent; opt out of certain processing; and appeal a decision. You may also complain to your local data protection authority. Agent Inbox will not discriminate against you for exercising a protected right.

Submit a request to support@agentinbox.si. Agent Inbox may verify identity and authority before acting. If Agent Inbox processes data for a customer, requests should ordinarily be directed to that customer; Agent Inbox will assist as required.

11. Children

The services are not directed to children under 18, and Agent Inbox does not knowingly collect personal information from them. Contact Agent Inbox if you believe a child has provided information.

12. Automated decisions and AI

Agent Inbox may use automated systems to provide classifications, summaries, workflow suggestions, abuse prevention, and customer-configured agent actions. Agent Inbox does not use website, contact, or beta application data to make decisions producing legal or similarly significant effects about individuals. Customers are responsible for their own automated decision use and legally required safeguards.

13. Changes and contact

Agent Inbox may update this Policy to reflect changes in law, technology, or services. Material changes will be posted with a new effective date and additional notice where required. Privacy inquiries and rights requests may be sent to support@agentinbox.si.