Legal

Privacy Policy

Last updated July 29, 2026

1. What we collect

When you create a CrossInbox account we collect your name, email address, and workspace details. When you connect a WhatsApp Business number, we store the account identifiers and access credentials needed to send and receive messages on your behalf. When you send or receive messages and emails through CrossInbox, we store that conversation content so your team can access it.

2. How we use it

We use your data to operate the product you signed up for: routing messages, sending campaigns, generating AI reply suggestions, and showing you analytics about your own workspace. We do not sell your data, and we do not use your customers' conversation content to train models outside serving your account.

3. Third-party services

CrossInbox connects to WhatsApp's official business messaging platform to send and receive messages, and to trusted AI processing partners to generate reply suggestions and summaries. These providers process the minimum data required to perform each request and are bound by their own data-processing terms.

4. Data retention

We keep your workspace data for as long as your account is active. If you cancel, we retain your data for 30 days in case you'd like to reactivate, after which it's permanently deleted from our systems.

5. Your rights

You can access, correct, export, or delete your account data at any time from your workspace settings, or by contacting us at the address below. If you're located in a region with specific data protection rights (such as the EU/UK GDPR or California's CCPA), those rights apply to your CrossInbox data as well.

6. Security

Access tokens for connected accounts are encrypted at rest. We use industry-standard practices to protect your data in transit and at rest, and limit internal access to what's needed to operate the service.

7. Contact us

Questions about this policy? Get in touch and we'll get back to you.