Privacy Policy

1. Introduction

This Privacy Policy outlines how InboxKit, operated by Enrich Labs FZ L.L.C. ("we," "our," or "us"), collects, uses, processes, and discloses your information through your use of our services. This policy is designed to comply with data protection laws including the General Data Protection Regulation (GDPR) for users within the European Union, the California Consumer Privacy Act (CCPA), and other applicable laws globally.

By using InboxKit's services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this policy, please do not use our services.

2. Information Collection

2.1 Personal Information

We collect personal information that you provide during account setup and use of our services, including but not limited to your name, email address, company information, and contact details.

2.2 Billing Information

We collect payment details and transaction history necessary for financial processing, billing, and compliance with applicable financial regulations.

2.3 Service Usage Data

We automatically collect information on how you interact with our services, including access logs, device data, IP addresses, browser type, operating system, email delivery metrics, and other usage details.

2.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to monitor interactions with our services, improve user experience, and deliver relevant marketing messages.

3. Use of Information

3.1 Service Provisioning

To provide, manage, and maintain our email deliverability services, including account creation, Google Workspace account provisioning, billing, and customer support.

3.2 Customer Support

To offer technical assistance, troubleshoot delivery issues, and respond to queries related to our services.

3.3 Service Improvements

To enhance and optimize our email infrastructure, delivery rates, and service offerings based on user feedback and performance analytics.

3.4 Compliance and Enforcement

To comply with legal requirements, prevent fraud, enforce our Terms of Service, and maintain the security and integrity of our platform.

3.5 Marketing Communications

To send you promotional materials, service updates, and relevant communications about our services, subject to your consent where required by applicable law.

4. Data Sharing and Disclosure

4.1 Service Providers

Information may be shared with third-party companies that assist in providing our services, such as Google Cloud Platform, payment processors, analytics providers, and infrastructure partners, under strict data protection agreements.

4.2 Legal Obligations

We may disclose your information if required by law, such as to comply with a subpoena, court order, regulatory request, or other legal processes.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or bankruptcy, customer information may be part of the transferred assets, subject to the same privacy protections.

4.4 Affiliates and Partners

We may share your information with our corporate affiliates and trusted partners, who will use that information in accordance with this Privacy Policy.

5. Data Security

We implement industry-standard security measures to protect against unauthorized access, alteration, disclosure, or destruction of data. These comprehensive security measures include:

• End-to-end encryption for data transmission and storage
• Advanced firewall protection and intrusion detection systems
• Secure Socket Layer (SSL) technology for all data transfers
• Regular security assessments and penetration testing
• Multi-factor authentication for administrative access
• Regular security training for our staff
• Compliance with SOC 2 Type II security standards

6. International Data Transfers

InboxKit operates globally and information we collect may be stored and processed in any country where we or our service providers maintain facilities, including the United States, European Union, and the United Arab Emirates.

By using our services, you consent to the transfer of information to countries outside of your country of residence, which may have different data protection rules than in your country. We ensure that all international transfers are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

7. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal data:

7.1 Access and Correction

You have the right to access and correct your personal information at any time through your account dashboard.

7.2 Data Deletion

You may request the deletion of your personal information, subject to certain legal and contractual obligations.

7.3 Objection and Restriction

You can object to the processing of your personal data and request the restriction of processing under certain circumstances.

7.4 Data Portability

You have the right to data portability, allowing you to obtain a copy of your personal data in a structured, machine-readable format.

7.5 Consent Withdrawal

Where we process your personal data based on your consent, you have the right to withdraw that consent at any time.

8. Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: Where you have given us clear consent to process your personal data for a specific purpose.
• Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Where processing is necessary for the purposes of legitimate interests pursued by us or a third party, and your interests and fundamental rights do not override those interests.

9. Data Retention

We retain your personal data only as long as necessary to provide you with our services, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on the type of data and the purpose for which it was collected.

10. Children's Privacy

Our services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will delete such information from our systems promptly.

11. Third-Party Links and Services

Our website and services may contain links to other websites and third-party services, including Google Workspace. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any linked sites or services you visit.

12. Data Breach Response

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authorities within 72 hours and affected individuals without undue delay, in accordance with applicable data protection laws.

13. Changes to This Privacy Policy

We may update this policy from time to time by posting a new version on our website. Material changes will be communicated to you via email or through prominent notice on our platform. You are advised to review this page periodically for any changes. Continued use of our services after any modifications constitutes acceptance of the revised policy.

14. Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to report a privacy concern, please contact us through our website's contact form or customer support channels.

Enrich Labs FZ L.L.C.
Dubai, United Arab Emirates

15. Trademarks and Affiliation

Trademarks mentioned in this policy belong to their respective trademark owners, and InboxKit may or may not have direct affiliation with these email service providers. By using our services, you acknowledge and accept that InboxKit acts as a reseller of email accounts from various providers and is not liable for the outcomes occurring due to the usage of these accounts.

16. Effective Date

This Privacy Policy is effective as of July 2, 2025, and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

By using InboxKit services, you agree to this comprehensive Privacy Policy.