Privacy Policy

1. Overview

This Privacy Policy explains how InboxKit ("Service"), operated by Juan Ibiapina ("we", "us", "our"), collects, uses, and protects your data. By using the Service, you agree to the practices described here.

2. Data we collect

We collect and process the following data to operate the Service:

• Account data: the handle you choose at signup and the email address derived from it.
• API keys: generated at signup for authentication.
• Email content: the messages you send and receive, including headers, body, and attachments.
• Email metadata: sender, recipient, subject, timestamps, and message IDs.
• Usage logs: IP addresses, request timestamps, API endpoints called, and response codes.
• Webhook configuration: URLs you register for inbound mail notifications.

3. How we use your data

We use your data for:

• Providing the Service: delivering, storing, and retrieving email messages.
• Abuse prevention: detecting spam, phishing, and violations of our Acceptable Use Policy.
• Service improvement: understanding usage patterns to improve reliability and performance.
• Legal compliance: responding to valid legal requests and meeting regulatory obligations.

We do not use your email content for advertising, profiling, or training AI models.

4. Data retention

• Email messages are stored until you delete them or your account is terminated.
• Usage logs are retained for up to 90 days and then automatically deleted.
• Account data is retained as long as your account exists. On account deletion, all associated data is removed within 30 days.

5. Third-party sharing

We do not sell your data. We share data only with:

• Infrastructure providers: hosting, DNS, and email delivery services that process data on our behalf to operate the Service.
• Legal authorities: when required by law, court order, or valid legal process.

Our infrastructure providers are bound by their own privacy policies and data processing obligations.

6. Cookies and tracking

The InboxKit website is a static page. We do not use cookies, tracking pixels, or analytics scripts on the website. The API does not set cookies.

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Delete your account and all associated data.
• Export your data in a portable format.
• Correct inaccurate data.
• Object to certain processing activities.

To exercise any of these rights, email juanibiapina@gmail.com. We will respond within 30 days.

8. Data security

We use industry-standard measures to protect your data, including encrypted connections (TLS) for all API communication. However, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

9. International transfers

Your data may be processed in jurisdictions outside your own. By using the Service, you consent to the transfer of data to countries where our infrastructure is hosted.

10. Children

The Service is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page. Continued use of the Service after changes constitutes acceptance.

12. Contact

Privacy questions? Email juanibiapina@gmail.com.