Zero Data-Mining Privacy Policy

Privacy Policy & Data Protection

Effective: August 15, 2026 · Product of Smart Infotech (Udyam-registered MSME).

1. Core Privacy Philosophy: "We Never Sell Your Data"

Inboxbees is a paid, software-as-a-service email orchestrator operated by Smart Infotech. We generate revenue strictly through transparent recurring subscriptions. We never sell, rent, lease, or monetize your personal information, domain configurations, or email bodies with data brokers, advertisers, or third-party AI training pipelines.

2. Information We Collect & Encryption Standards

Account Credentials & Profiles: Email address, tenant name, hashed passwords (bcrypt), and account recovery metadata.
Encrypted Credential Vault: Third-party provider passwords (IMAP/SMTP) and BYOK sending API keys (Brevo, Resend, Mailjet, AWS SES) are encrypted at rest using authenticated AES-256-GCM encryption with client-isolated keys.
Domain Verification & DNS Records: SPF, DKIM, DMARC, MX, and RDAP expiry timestamps to operate the Domain Tracker and Deliverability Health Radar.
Inbound & Outbound Email Payloads: Incoming emails routed via Cloudflare Email Routing or webhooks are stored in your tenant-isolated Cloudflare R2 object storage bucket and indexed in D1 SQLite with full-text search.

3. Storage Infrastructure & Data Residency

Inboxbees runs entirely serverless on Cloudflare global edge network. Metadata is held in Cloudflare D1 distributed SQLite tables, and raw RFC 822 MIME payloads/attachments reside in Cloudflare R2 object storage with multi-region redundancy.

4. Cookie & Tracking Policy

We do not use third-party advertising trackers, cross-site trackers, or marketing pixels. Our web application utilizes only functional, strictly necessary session cookies and local storage keys (inboxbees_token) required to maintain your authenticated session and user interface preferences.

5. Data Retention & User Rights

You maintain complete ownership of your email data. Through the Mailbox & Storage Settings panel in the app, you can:

Configure automated email retention policies (30 days, 90 days, 1 year, or Forever).
Export all domain lists, DNS check histories, and email logs to CSV format.
Request complete, irrevocable deletion of your tenant account and all stored R2 data.

6. Privacy & Data Protection Officer

For any questions, data access requests, or privacy inquiries, contact our dedicated desk:

Smart Infotech Privacy Desk

Email: privacy@inboxbees.com

Corporate: Smart Infotech · Udyam MSME Registered