This Privacy Policy explains how uinbx ("we," "us," or "our") collects, uses, stores, and protects information when you use the uinbx platform at uinbx.io ("Service"). We are committed to protecting your privacy and handling your data with transparency.
Account information: When you register, we collect your name, email address, and password (stored as a one-way bcrypt hash — we never store plaintext passwords).
Email credentials: To sync your mailboxes, we store IMAP/SMTP credentials (host, port, username, password). Passwords are encrypted at rest using AES-256 encryption.
Email content: We sync and store email messages, headers, sender/recipient addresses, subjects, and attachments from your connected mailboxes. This data is stored solely to power the Service for you.
DMARC report data: If you use DMARC monitoring, we process DMARC aggregate and forensic reports sent to your reporting addresses.
Usage and log data: We collect server-side logs including IP addresses, request paths, timestamps, and error information for security and debugging purposes.
Payment data: We do not store your payment card details. Payments are handled by Paddle, our Merchant of Record. Paddle's privacy practices are described in Paddle's Privacy Policy.
| Purpose | Data used |
|---|---|
| Provide and operate the Service (email sync, search, sending) | Email credentials, email content, account info |
| Authentication and security | Account info, session data, IP address |
| Billing and subscription management | Account info (shared with Paddle) |
| Customer support | Account info, usage logs |
| Service improvement and debugging | Anonymised usage logs |
| Legal obligations | As required by applicable law |
We do not sell your data, use your email content for advertising, or share it with third parties except as described in this policy.
We share your data only with:
We retain your account data and email content for as long as your account is active. If you close your account, we delete your data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.
Server logs are retained for up to 90 days and then automatically deleted.
We implement industry-standard security measures including:
No system is perfectly secure. We will notify you promptly if we become aware of a data breach that affects your personal information.
We use a single session cookie to keep you logged in. This cookie is HttpOnly, Secure, and contains no personally identifiable information beyond a session identifier.
We use Google Analytics on the public marketing pages to understand traffic. Google Analytics may use cookies. You can opt out using the Google Analytics opt-out browser add-on. No analytics tracking is active inside the authenticated application.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, email us at support@uinbx.io. We will respond within 30 days.
The Service is not directed at children under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will delete it promptly.
Your data may be stored and processed on servers located outside your country of residence. By using the Service, you consent to such transfers. We take appropriate safeguards to ensure your data remains protected regardless of where it is processed.
We may update this Privacy Policy from time to time. We will notify you by email or by a notice on the Service at least 14 days before material changes take effect. Your continued use after the effective date constitutes acceptance of the updated policy.
Questions or concerns about this Privacy Policy? Contact us at support@uinbx.io.