Last Updated: September 27, 2026 • Effective Date: September 27, 2026
This Privacy Policy explains how InboxGuru (operated by Pangkha Gadget, "we", "us", or "our") collects, uses, stores, and protects information when you interact with our platform at https://inboxguru.xyz and our integrated WhatsApp customer communication tools.
1. Data Controller Information
The entity responsible for processing your data is:
To provide unified customer support, order fulfillment, and multi-agent communication via the WhatsApp Business Platform (Cloud API), we collect:
Contact & Profile Identifiers: Your phone number, WhatsApp display name, and unique Meta WhatsApp User IDs.
Communication History: Inbound and outbound message text, voice notes, images, documents, message timestamps, delivery status receipts (sent, delivered, read), and message reactions.
Device & Notification Data: Browser push subscription tokens (VAPID) and Android device tokens (Firebase Cloud Messaging) strictly to alert business agents of incoming customer messages.
3. How We Use Your Information
We process collected data exclusively for legitimate operational purposes:
Enabling real-time two-way messaging between customers and authorized business support agents.
Synchronizing chat history and contacts across linked mobile apps and the InboxGuru web console.
Delivering critical order status updates, transactional notifications, and customer inquiries.
Ensuring technical reliability, debugging latency, and preventing fraudulent use or spam.
We Do Not Sell Your Data: InboxGuru never sells, rents, or monetizes customer personal data, phone numbers, or conversation content to third-party advertisers or data brokers under any circumstances.
4. Data Sharing & Third-Party Processors
We share data only with essential technology service providers necessary to operate our service:
Meta Platforms, Inc. (WhatsApp Cloud API): Message routing, media handling, and official business messaging infrastructure. All data processed via Meta is subject to the WhatsApp Business Data Processing Terms.
Google Firebase (FCM): Push notification delivery for mobile agent devices.
5. Data Retention & Security
We implement industry-standard administrative, physical, and technical safeguards:
All transmissions between browsers, servers, and Meta APIs are secured using HTTPS / TLS 1.3 encryption.
Message data is stored on secure, access-controlled Linux servers with automated hourly backups.
Conversations and media are retained only for as long as necessary to provide customer support services or comply with legal obligations.
6. User Rights & Data Deletion (Meta GDPR/CCPA Compliance)
You have the right to request access to, correction of, or permanent deletion of your personal data at any time.
How to Request Data Deletion:
To request complete removal of your chat history, phone number, and media from our systems, send an email to [email protected] with the subject line "Data Deletion Request" and your phone number. Requests are processed within 48 business hours, and confirmation is sent upon completion.
7. Changes to This Privacy Policy
We may update this policy periodically to reflect updates in our features, legal obligations, or Meta platform policies. Any revisions will be published on this page with an updated effective date.
8. Contact Us
If you have any questions or concerns regarding this Privacy Policy, please contact us at: