Privacy Policy

We may collect account and business details such as name, email address, workspace name, login records, billing status, support messages, and preferences. We may also process Customer Content that you or your authorised users place in the service, including contact details, conversation messages, files, campaign data, automation rules, AI prompts, and webchat submissions.

We automatically receive technical and usage information such as IP address, device and browser details, timestamps, pages or features used, error logs, and security events.

We use information to create and secure accounts, provide and maintain HiPA inBox, route and deliver messages, operate webchat, process billing, provide support, monitor usage and abuse, troubleshoot errors, improve the service, communicate service notices, comply with law, and protect our rights and users.

For Customer Content, your business may be the party deciding why and how personal data is processed, while AI Rocket Planet Solution processes it to provide the service. You are responsible for having a lawful basis, appropriate notices, permissions, and consent where required, and for responding to requests from the people whose data you manage.

When enabled, AI features may send relevant inputs, conversation context, prompts, and usage information to the AI provider configured by the platform owner. Connected channels, email, SMS, payment, hosting, analytics, and other service providers may process information as needed to provide their integrations. Their own terms and privacy policies also apply.

We may share information with service providers acting on our instructions, connected providers selected by you, professional advisers, authorities where legally required, and parties involved in a corporate transaction. We do not sell Customer Content as a standalone data product. We may use aggregated or de-identified information for analytics, security, and service improvement where it no longer reasonably identifies a person.

Information may be processed in Malaysia or other countries where our service providers operate. We use reasonable administrative, technical, and organisational safeguards, but no internet transmission or storage system can be guaranteed completely secure.

We retain information while an account is active and as needed for the purposes described here. After account closure, we intend to retain account and Customer Content for up to 30 days before permanent deletion, subject to backups, legal obligations, security records, disputes, and provider limitations.

InboxHero currently does not provide a self-service reactivation or permanent-deletion scheduler. During the 30-day period, you may contact cs@hipa.app to request review or reactivation. We do not guarantee reactivation, and data may be permanently deleted after the retention window or earlier where required for security, law, or third-party reasons.

Depending on applicable law, you may request access, correction, deletion, restriction, or a copy of personal data, or object to certain processing. Requests should be sent to cs@hipa.app. We may need to verify your identity and coordinate with the relevant Customer where the request concerns Customer Content.

HiPA inBox is intended for businesses and is not directed to children. Do not use the service to knowingly collect children's personal data without the required permissions and safeguards.

We may update this Policy by publishing a revised version. The updated date above shows when it was last changed. Questions or privacy requests may be sent to cs@hipa.app.