Data Processing Addendum
This Data Processing Addendum (“DPA”) applies when Inboxly, operated by Bilal Raza, Pakistan, processes personal data on behalf of a customer under the Terms of Service or a managed-pilot quotation.
Roles and instructions
The customer is controller and Inboxly is processor for customer contact, lead, message, campaign, event, and conversion data. Inboxly will process that data only to provide the agreed service, on documented customer instructions, or as required by law.
Customer responsibilities
The customer is responsible for lawful collection, notices, legal bases, consent, audience use, data accuracy, and instructions. The customer must not provide data that it cannot lawfully process through Inboxly.
Confidentiality and security
Access is limited to authorized persons subject to confidentiality obligations. Measures include role-based access, tenant isolation, encrypted access tokens, signature-verified webhooks, audit logging, rate limiting, and restricted production access.
Sub-processors
The customer authorizes Meta, Cloudflare, and Anthropic as described in the Privacy Policy. Inboxly remains responsible for its sub-processor obligations and will update the public list when material providers change.
Assistance and incidents
Taking into account the nature of processing, Inboxly will reasonably assist with data-subject requests, security assessments, and required notifications. Inboxly will notify affected customers without undue delay after confirming a personal-data breach involving their data.
Deletion and return
On termination or written request, Inboxly will delete or return customer personal data, unless retention is legally required. Provider backups may retain limited copies for up to 90 days before expiry.
Transfers and audits
Where cross-border transfer safeguards are required, the parties will cooperate on appropriate contractual measures. Inboxly will provide reasonable compliance information; any audit must protect other customers, security, and confidential information.
Contact
Data-protection requests: privacy@inbox-ly.xyz.