Privacy Policy

Who we are

InboxHand is operated by Spaceman Tech LLC ("InboxHand", "we", "us"). InboxHand answers WhatsApp messages from a business's leads on the business's behalf, asks the business owner when it doesn't know an answer, and gives the owner a web inbox and daily reports. This policy explains what we collect, why, who we share it with, and how to delete it.

Two kinds of people, two roles

Business customers (the people who sign up for InboxHand): we are responsible for your account data.

Leads (people who message a business that uses InboxHand): the business decides how your messages are used, and we process them on its behalf. If you are a lead, contact the business first. You can also write to us and we will help.

What we collect

• Account data: your email address, a hashed password, your business name and description, and the answers you teach the assistant.
• Owner phone number: the WhatsApp number we use to ask you questions and send your daily report.
• Lead conversations: the WhatsApp number, profile name and messages of people who write to your business number, including photos and voice notes they send, and our transcripts or descriptions of them.
• If you connect your own WhatsApp Business app number: with your permission, Meta shares up to 180 days of your existing chat history and your WhatsApp contacts with us, plus the messages you send from your phone afterwards. We use them only to show your chats in the inbox and to keep the assistant away from people you already know.
• Usage data: basic logs (IP address, browser, timestamps) to keep the service secure and working.

How we use it

To answer your leads in your voice, to ask you what it doesn't know, to show you every conversation, to send your daily report, to secure the service and to support you. We do not sell personal data, we do not use it for advertising, and we do not use your or your leads' conversations to train AI models.

AI processing

Messages are sent to OpenAI to write replies, transcribe voice notes and describe photos. Under OpenAI's API terms, data sent through the API is not used to train their models. Replies are generated only from the facts you give the assistant. When it doesn't know something, it asks you instead of guessing.

Who we share it with

Only the providers we need to run InboxHand, each bound by its own data-protection terms:

• Meta (WhatsApp) and Twilio: delivering WhatsApp messages.
• OpenAI: writing replies, transcription and image description.
• DigitalOcean: hosting and database (United States).
• Mailgun: account emails such as password resets.
• Stripe: payments, if you subscribe.

We may also disclose data if the law requires it.

Security

All traffic is encrypted in transit (HTTPS). WhatsApp access tokens are encrypted at rest. Passwords are stored as hashes. Webhooks from Twilio and Meta are signature-checked. No system is perfectly secure, but we limit access to the people who operate the service.

How long we keep it

For as long as your account is open. When you delete your account we erase your business, conversations, contacts and saved answers right away, and backups roll off within 30 days. If you disconnect InboxHand from your WhatsApp Business app, we immediately stop receiving your messages and discard our access token.

Deleting your data

You can delete your account and everything in it from Settings → Delete account. Or email hello@inboxhand.com from your account address. Leads can ask the business, or email us with their WhatsApp number. See Data deletion for the full steps. We confirm by email once it's done, within 30 days at the latest.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, or to object to how it's used. Email us and we'll respond within 30 days.

Children

InboxHand is a business tool and is not directed at children under 16.

Changes

If we change this policy in a meaningful way, we will email account holders before the change takes effect.

Contact

Spaceman Tech LLC · hello@inboxhand.com