Legal

Privacy Policy

Last updated: June 16, 2026

1. Introduction

VRLY Ventures LLC ("Company," "we," "us," or "our"), operating as inboxr, is committed to protecting your privacy. This Privacy Policy describes how information is handled when you access inboxr, our AI email agent that monitors inboxes over IMAP, drafts replies with AI, and queues them for human review (co-pilot) or sends them automatically (autopilot).

2. Information We Collect

2.1 Information You Provide

  • Account Information: name, email, password, job title, company details, phone.
  • Organization Information: business name, industry, company size, website, address.
  • Email Content: the inbound and outbound email processed through your connected mailboxes, including message bodies, subjects, headers, attachments, AI-generated drafts, and the replies you approve or send.
  • Configuration Content: mailbox connection settings, agent role and tone settings, system prompts, knowledge base content, and ignore rules you create.
  • Communication Data: messages, support requests, and feedback.
  • Payment Information: billing details handled through our third-party payment processor.

2.2 Information Collected Automatically

  • Device Information: type, operating system, browser, and identifiers.
  • Log Data: IP address, access times, pages viewed, URLs, and actions taken.
  • Usage Data: features used, drafts reviewed, and engagement metrics.
  • Location Data: general geographic location derived from IP address.
  • Cookies and Similar Technologies: see our Cookie Policy.

2.3 Information from Third Parties

We may receive information from business partners, public sources, and other users where applicable.

3. How We Use Your Information

We use the information we collect to provide, maintain, operate, and improve our Services, including account management, processing inbound email and generating AI drafts, transaction handling, security alerts, customer service, fraud detection, and legal compliance. Email content is processed to draft and (where you enable it) send replies on your behalf, and to improve the relevance of future drafts for your account.

4. How We Share Your Information

4.1 With Your Consent

Information is shared when you direct or consent to it.

4.2 With Email Recipients

When you approve a draft or enable autopilot, the reply is delivered to the recipient of that email through your connected mailbox. inboxr sends only the replies you or your configured agents authorize.

4.3 With Service Providers

We use third-party vendors for hosting, storage, analytics, payment processing, email delivery, and AI model inference. Email content may be transmitted to one or more third-party AI providers (such as Anthropic, Google, or OpenAI) solely to generate drafts and related assessments.

4.4 For Legal Reasons

We may disclose information if required by law, regulation, legal process, or governmental request.

4.5 Business Transfers

Information may be shared in mergers, asset sales, acquisitions, or similar transactions.

4.6 Aggregated or De-identified Data

Aggregated or de-identified, non-identifiable information may be shared.

5. Data Retention

  • Unverified registrations: automatically deleted within 24 hours.
  • Active accounts: retained for the life of the subscription or trial.
  • Expired trial accounts: purged after the grace period described in our lifecycle policy.
  • Lapsed paid accounts: purged after the grace period following suspension.
  • Email logs and AI drafts: retained for the life of the account to operate the service and the learning loop, and deleted during account purges.
  • Audit logs: retained for the life of the account and deleted during purges.
  • Backups: encrypted database backups may temporarily contain copies of your data for up to 30 days after deletion.

6. Data Security

We implement and maintain reasonable administrative, technical, and physical security measures designed to protect your information, including encryption, access controls, secure transmission, and regular assessments. No method of transmission or storage is completely secure.

7. Your Rights and Choices

Available to all users regardless of jurisdiction:

  • Access: request a copy of personal information held.
  • Correction: request correction of inaccurate information.
  • Deletion: request deletion, subject to retention exceptions.
  • Portability: request data in a machine-readable format.
  • Opt-Out of Marketing: unsubscribe using email footer links.
  • Withdraw Consent: withdraw consent-based processing.
  • Object to Processing: object under GDPR Article 21.
  • Non-Discrimination: exercise rights without retaliation.

7.1 How to Make a Request

Email compliance@inboxr.io with the email address associated with your inboxr account, the specific right you are exercising, and enough context for us to confirm you are the data subject. Response timelines: EU, UK, and GDPR-aligned jurisdictions, 30 days; California and similar US states, 45 days.

7.2 Who Is Responsible for Your Data

For account holders, inboxr acts as the data controller. For the senders and recipients whose email flows through a customer's connected mailbox, the customer organization is the controller and inboxr acts as a processor on its behalf.

7.3 What We Cannot Delete

  • Records required by tax, accounting, anti-fraud, or legal obligations.
  • De-identified or aggregated information.

8. Cookies and Tracking Technologies

We use cookies and similar technologies as described in our Cookie Policy.

9. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties.

10. Children's Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect personal information from children and will delete it promptly if discovered.

11. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States. By using the Services, you consent to these transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated date.

13. Contact Us

VRLY Ventures LLC
d/b/a inboxr
1346 How Lane, Unit 7
North Brunswick Township, NJ 08901
Email: compliance@inboxr.io