Privacy Policy

Privacy Policy for InboxEagle

At InboxEagle, we prioritize your privacy and are committed to protecting your personal information. This Privacy Policy outlines the information we collect from you when you use our services, how we use and protect that information, and your rights regarding your personal data. By accessing or using the services provided by InboxEagle, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect different types of information based on your interactions with InboxEagle and the services we provide:

Personal Information

When you create an account, subscribe to our newsletter, make a purchase, or contact us, we collect personal details such as:

• Name
• Email address
• Phone number
• Billing and shipping addresses
• Payment details (such as masked credit card information)
• Company information (if applicable)

This information allows us to fulfill your requests, process payments, and communicate with you regarding your account and services.

End User Data

If you use InboxEagle on behalf of your customers (e.g., an eCommerce store owner), we may collect anonymized information about the end users (your customers) interacting with your site. This includes:

• IP addresses (anonymized)
• Browser and device details
• Consent timestamps
• Other browsing behaviors while interacting with your site

We process this data on behalf of, and on the documented instructions of, the customer in order to support consent management and email deliverability analysis. We use it to improve InboxEagle only in aggregated or anonymised form that does not identify any individual end user.

Usage Data

We automatically collect data regarding how you interact with our services, including:

• Your IP address
• Location (e.g., country or city)
• Browser type and version
• Referring and exit URLs
• Time and duration of your visits
• Interaction data (e.g., links you click, features you use)

This helps us monitor service usage, identify potential issues, and improve overall performance and user experience.

Social Media Data

If you engage with us via social media platforms (e.g., liking, following, or sharing content), we may collect your profile information from these platforms, such as your user ID, profile information, and posts you've interacted with.

2. How We Use Your Information

We use the information we collect to provide you with a seamless experience and improve our services. Specifically, we use your data for the following purposes:

To Provide and Improve Our Services

Your information allows us to provide, maintain, and enhance the functionality of InboxEagle, ensuring that you receive accurate email marketing insights, templates, and deliverability analysis.

Customer Support

We use your contact details to respond to your inquiries, resolve issues, and assist you with any support requests.

Research and Analysis

We analyze usage trends to improve the services we offer and develop new features that better suit your needs. This also includes tracking service performance and optimizing our system for better user experience.

Marketing and Communications

With your consent, we may send you promotional emails, newsletters, product updates, and special offers. You can always opt-out of these communications by following the instructions included in each email or through your account settings.

Legal and Compliance

We use your data to comply with legal obligations, such as processing payments, maintaining tax records, and responding to regulatory inquiries or court orders.

3. Legal Bases for Processing

Where the EU or UK General Data Protection Regulation applies, we process personal data only where we have a lawful basis to do so under Article 6(1). The basis we rely on depends on the purpose:

• Providing and maintaining the service — creating and administering your account, delivering deliverability analysis and reporting, and providing the features you have subscribed to. Legal basis: performance of a contract, Article 6(1)(b).
• Customer support — responding to your enquiries, troubleshooting, and resolving issues. Legal basis: performance of a contract, Article 6(1)(b).
• Billing and payment processing — charging for the service and maintaining transaction records. Legal basis: performance of a contract, Article 6(1)(b), and compliance with a legal obligation, Article 6(1)(c), for tax and accounting records.
• Service improvement, research and analytics — analysing usage trends, monitoring performance, and developing new features. Legal basis: legitimate interests, Article 6(1)(f) — our interest in operating, securing, and improving the service, balanced against your rights and freedoms.
• Security, fraud prevention and abuse detection — protecting our systems, our customers, and their recipients. Legal basis: legitimate interests, Article 6(1)(f).
• Marketing communications — sending newsletters, product updates, and promotional messages. Legal basis: consent, Article 6(1)(a). You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Cookies and similar technologies that are not strictly necessary — analytics and personalisation. Legal basis: consent, Article 6(1)(a). Strictly necessary cookies rely on legitimate interests, Article 6(1)(f).
• Legal and regulatory compliance — meeting statutory obligations and responding to lawful requests from authorities. Legal basis: compliance with a legal obligation, Article 6(1)(c).

Our Role: Controller and Processor

For the personal data of our own customers — account, contact, usage, and billing data — InboxEagle acts as a controller, and the legal bases above apply to us directly. For end-user data that we process on behalf of a customer (for example, data about the subscribers or shoppers of a merchant using InboxEagle), InboxEagle acts as a processor. In that case the customer is the controller, determines the purposes of processing, and is responsible for establishing the Article 6(1) legal basis; we process such data only on that customer's documented instructions and under our data processing terms.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. However, we may share information under certain circumstances, including:

Service Providers

We may disclose your data to third-party vendors and service providers that help us operate our website, process payments, and manage marketing campaigns. These third parties are bound by confidentiality agreements and are not allowed to use your data for any other purpose.

Affiliates

We may share information with our affiliates or subsidiaries where this is necessary to operate, support, and improve the service, subject to the same confidentiality and data protection obligations set out in this Privacy Policy. We do not share end-user data that we process on behalf of our customers with our affiliates for marketing purposes.

Legal Obligations

We may disclose your information to comply with legal requirements, respond to subpoenas, or protect the rights, property, or safety of InboxEagle, our users, or the general public.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, we may transfer your information as part of that transaction.

Aggregate Data

We may share non-personally identifiable, aggregate data for marketing, research, or analysis purposes. This data will not be linked to any individual user.

5. Cookies and Other Tracking Technologies

To enhance your experience and provide personalized content, we use cookies and similar technologies (e.g., pixel tags, web beacons) to track your usage of our website. Cookies help us remember your preferences, improve website functionality, and analyze site traffic.

You can manage your cookie preferences through your browser settings. Please note that disabling cookies may limit some functionalities of the site.

6. Your Rights and Choices

You have control over your personal information and can exercise certain rights, including:

Access and Correction

You can request access to the personal information we have about you and request corrections if any of the information is inaccurate.

Deletion

You have the right to request that we delete your personal data, subject to certain exceptions, such as legal or regulatory requirements.

Opting Out of Communications

You can opt-out of receiving marketing emails or SMS by following the unsubscribe link in the communication or by contacting us directly.

Objection to Processing

Where we process your personal data on the basis of our legitimate interests, you have the right to object to that processing at any time on grounds relating to your particular situation. If you object, we will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or we need the data to establish, exercise, or defend legal claims. You may object to processing for direct marketing at any time, and we will stop without exception.

Withdrawal of Consent

Where we rely on your consent, you may withdraw it at any time. Withdrawing consent is as easy as giving it, and does not affect the lawfulness of any processing we carried out before you withdrew.

Restriction of Processing

In certain circumstances you may ask us to restrict the processing of your personal data, for example while we verify the accuracy of data you have contested.

Lodging a Complaint

If you are in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with your local data protection supervisory authority. We would appreciate the chance to address your concerns directly first, so please do contact us before doing so.

Data Portability

In certain cases, you have the right to receive a copy of your personal data in a structured, commonly used format and transfer it to another service provider.

7. Data Retention

We retain personal data only for as long as it is needed for the purposes described in this Privacy Policy. We operate a quarterly retention review: data that has passed its retention period is deleted or irreversibly anonymised as part of that review cycle. The periods below apply by data type.

• Account data (name, email address, phone number, company details, account settings) — retained for the duration of your account, and deleted within 90 days of account closure or termination of your subscription.
• Consumer / end-user data (anonymised IP addresses, browser and device details, consent timestamps, browsing interactions processed on behalf of our customers) — retained only for as long as is necessary to provide the service, or in accordance with the customer's documented instructions, and in any event for no longer than 90 days unless a longer period is required by the customer or by applicable law. It is deleted sooner if the customer deletes it, disconnects the integration, or instructs us to erase it.
• Usage logs (application, access, and security logs, including IP address, approximate location, browser type, referring URLs, and feature interactions) — retained for 90 days, after which they are deleted or aggregated into statistics that no longer identify any individual.
• Billing records (invoices, transaction history, masked payment identifiers) — retained for 7 years from the date of the transaction, in order to meet our tax, accounting, and audit obligations. During that period these records are retained solely for that purpose and are not used for marketing or analytics.
• Marketing and communication preferences (including records of consent and opt-outs) — retained for as long as needed to honour your choice, so that we do not contact you again after you unsubscribe.
• Support correspondence — retained for 90 days after the request is resolved.

Where we are required to retain data to comply with a legal obligation, to establish, exercise, or defend legal claims, or to resolve a dispute, we retain it for the period required and then delete it. You can request deletion of your personal data at any time by contacting us using the details in the "Contact Us" section below.

8. Data Security

We implement reasonable security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our services are not intended for children under the age of 13, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it as soon as possible.

10. California Privacy Rights (CCPA)

California residents have the right to request access to, deletion of, or a copy of their personal information. For more details on how to exercise these rights, please refer to our California Privacy Notice.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date." We encourage you to review this policy periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: