Privacy Policy

We collect information you provide directly, including:

• Email address and name when you sign up
• Phone number if you choose to provide it
• UTM parameters from marketing campaigns

We process your emails (including full content) to provide categorization and organization services. Email content is processed temporarily and is never permanently stored on our servers.

When you connect your email account, we access:

• Email metadata (sender, subject, date, attachments)
• Email content for processing and categorization
• Attachment content for categorization

We use collected information to:

• Provide and maintain our email processing service
• Send you verification codes and service notifications
• Improve our AI categorization algorithms
• Communicate with you about your account
• Track marketing campaign effectiveness

We use your interactions with the service (such as categorization choices and feedback) to train and improve our AI models. Personal information such as your name, email address, or email content is never used for AI training.

You may opt out of your interaction data being used for AI improvement by contacting us at inboxforge@openprocess.me.

Your data is stored securely using Supabase, our trusted database partner, hosted in the European Union. We implement:

• Bank-level encryption for data in transit and at rest
• Secure authentication via email OTP
• Regular security audits and updates

Email content is never permanently stored. We process emails temporarily to categorize and organize them, then discard the content immediately after processing.

If you connect cloud storage (such as Google Drive or iCloud), files are stored directly in your own account. We never store copies of your files on our servers.

We use cookies and similar technologies for:

• Authentication and session management
• Storing UTM parameters for marketing attribution
• Remembering your preferences

We also use Google Tag Manager and Meta Pixel for analytics and marketing purposes.

We integrate with email providers and cloud storage services to provide our functionality:

• Supabase (European Union) for data storage and authentication
• Your email provider (Gmail, iCloud, etc.) for email access
• Cloud storage providers (Google Drive, iCloud, etc.) for file storage
• Telegram for notification delivery

Each third-party service has its own privacy policy. We encourage you to review them.

We process emails locally using our own AI models for categorization, ensuring your email data is processed within our secure infrastructure.

Under POPIA, you have the right to:

• Access your personal data
• Correct or delete inaccurate personal information
• Delete your account and associated data
• Object to the processing of your personal information
• Opt out of marketing communications
• Opt out of your interaction data being used for AI improvement

Data export is available as a custom request. Contact us at inboxforge@openprocess.me to request a data export.

If you have concerns about how we handle your personal information, you have the right to complain to the Information Regulator of South Africa:

Information Regulator (South Africa)
Email: ir@justice.gov.za
Website: https://www.justice.gov.za/inforeg/

We retain your information for as long as your account is active or as needed to provide services. You may delete your account at any time, which will remove:

• Your profile information
• Email categorization preferences
• Marketing attribution data

Email content is never retained after processing.

Account data deletion requests are processed within 30 days. Some information may be retained longer if required by law.

In the event of a data breach that affects your personal information, we will:

• Notify the Information Regulator within 72 hours of becoming aware of the breach
• Notify affected users directly as soon as possible
• Document the breach and remedial actions taken

You will be informed of the nature of the breach, the data affected, and steps you should take to protect yourself.

InboxForge is committed to complying with the Protection of Personal Information Act (POPIA) of South Africa. We handle your personal information in accordance with the following principles:

• Lawful Processing: We only process personal information in a lawful and reasonable manner
• Purpose Specification: Personal information is collected for specific, explicitly defined purposes
• Minimal Processing: We only collect information that is adequate and relevant to the services provided
• Accuracy: We take reasonable steps to ensure personal information is accurate and up to date
• Security: We implement appropriate technical and organizational measures to protect personal information
• Accountability: We are accountable for complying with the POPIA conditions
• Data Subject Participation: You have the right to access and correct your personal information

We take security seriously and monitor our systems for any suspicious activity.

If we detect any malicious attempt against our system, including but not limited to unauthorized access attempts, data breaches, or exploitation of vulnerabilities, we reserve the right to:

• Immediately suspend the offending account
• Report the incident to relevant authorities (including South African law enforcement and the Information Regulator)
• Pursue legal action for any damages caused

Users are subject to the laws of South Africa for any malicious activity or damages caused.

To report security vulnerabilities or suspicious activity, contact us at inboxforge@openprocess.me.

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

Email: inboxforge@openprocess.me

Company: OpenProcess