Privacy Policy

This Privacy Policy describes how Inbloq collects, uses, and protects your information when you use our Service.

1. Information We Collect

Account Information

When you create an account, we collect your email address, name, and password (stored as a hash). If you invite team members, we collect their email addresses.

Customer Support Data

The Service processes data you or your customers submit — including ticket content, email messages, contact form submissions, customer names, and customer email addresses. You are the controller of this data; Inbloq is the processor.

Payment Information

We use Stripe to process payments. Stripe collects and stores your payment details directly. We receive only the minimum information needed (subscription status, last 4 card digits for your records).

Usage Data

We collect standard analytics — pages viewed, features used, errors encountered — to improve the Service. We use privacy-respecting tools and do not track individuals across sites.

2. How We Use Your Information

• To provide and operate the Service
• To communicate with you about your account, billing, and product updates
• To respond to your support requests
• To detect and prevent fraud or abuse
• To improve the Service based on aggregated usage patterns

We will never sell your data, use it for advertising, or train AI models on customer content without explicit opt-in.

3. Data Sharing

We share data only with:

• Supabase — database and authentication hosting
• Vercel — web hosting and serverless functions
• Stripe — payment processing
• Resend — transactional email delivery
• Government authorities, when legally required

Each of these has signed a Data Processing Agreement with us.

4. Data Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is limited and logged. We follow industry-standard practices for password hashing, session management, and infrastructure security.

5. Data Retention

We retain your account data for as long as your account is active. On cancellation, we retain data for 30 days to allow reactivation, after which it is permanently deleted. You may request immediate deletion at any time.

6. Your Rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a machine-readable format
• Object to certain processing

To exercise these rights, email support@inbloq.com.

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

8. Children's Privacy

Inbloq is not intended for users under 13. We do not knowingly collect data from children.

9. International Transfers

Your data may be processed in countries other than your own. We only use providers with appropriate data protection safeguards in place.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via email at least 30 days before taking effect.

11. Contact

Privacy questions? Email support@inbloq.com.