Invox
Company mail workspace
Privacy first
Invox is designed for private company webmail across web and mobile. This policy explains how we handle account data, mailbox access, device sessions, attachments, app permissions, and mobile push notifications.
This Privacy Policy applies to the Invox web application, mobile application, related APIs, and services used to access and manage company email accounts.
By using Invox, you understand that the application may process mailbox, account, device, and notification information as described in this policy.
We may collect information required to operate your Invox account, including your name, email address, login credentials, session records, device details, and mailbox configuration details such as IMAP and SMTP host settings.
When you connect a mailbox, Invox may process email metadata, message content, folders, attachments, sender details, recipients, subject lines, timestamps, read status, unread status, starred status, folder actions, and other mailbox data required to provide email client functionality.
When you use the Invox mobile application, we may process mobile-specific information such as device type, operating system, app version, login session information, device activity, push notification token, and basic diagnostic information needed to operate, secure, and troubleshoot the app.
This information is used to keep you signed in, protect your account, display logged-in devices, support logout from one or all devices, deliver mobile notifications, and improve app reliability.
Invox accesses mailbox data only to provide email client functionality requested by the user or organization. Email content and attachments are processed for mailbox display, search, sending, forwarding, replying, downloading, notifications, folder actions, read/unread changes, starred/unstarred changes, and trash management.
Depending on your mailbox configuration, some email data may remain stored on your original email provider, IMAP server, SMTP server, or company mail infrastructure.
Invox does not sell mailbox content, attachments, contact information, device data, or push notification tokens to advertisers.
When you sign in from a browser or mobile device, Invox may store session and device information such as platform, device type, app version, browser details, last active time, session identifier, and security-related access records.
This information is used to help you review active sessions, identify unknown devices, and log out from a single device or from all devices.
The Invox mobile app may use push notification services, including Firebase Cloud Messaging, to deliver new-mail and account-related notifications to your device.
Push notification tokens are used only for notification delivery and related security or operational purposes. You can disable notifications at any time from your device settings.
Notification content may include limited mailbox-related information, such as a new mail alert, sender name, email subject, or message preview, depending on the app configuration and your device notification settings.
The mobile app may request permissions required for normal operation. These may include internet access for connecting to Invox servers and notification permission for delivering new-mail alerts.
If future versions of the app request additional permissions, such as file access, camera, contacts, or storage, those permissions should be used only for the feature shown to the user and should be reflected in this Privacy Policy.
We may use trusted service providers to operate Invox, including hosting providers, database or storage providers, email infrastructure, IMAP/SMTP servers, Firebase Cloud Messaging, security tools, analytics tools, crash reporting tools, and other operational services.
These providers may process limited information only as needed to provide their services, support security, maintain infrastructure, deliver notifications, troubleshoot issues, or comply with legal requirements.
We do not sell your personal information. We may share limited information only when required to operate the service, comply with legal obligations, protect users, prevent abuse, investigate security issues, or work with trusted infrastructure and service providers.
We use reasonable technical and organizational safeguards to protect account and mailbox information. These may include encrypted connections, access controls, secure session handling, protected credentials, audit records, and restricted administrative access.
No online service can guarantee absolute security. You should use strong passwords, protect your devices, keep your app updated, and immediately revoke sessions you do not recognize.
We retain information for as long as needed to provide the service, maintain security, comply with legal requirements, resolve disputes, and enforce agreements.
Deleted or trashed mailbox items may be retained temporarily before permanent deletion, depending on configured retention rules. Some messages or attachments may also remain on your original mail server depending on your IMAP/SMTP provider and mailbox settings.
You may contact us to request deletion of your Invox account or applicable account data. After a verified request, we will delete or disable applicable data according to our legal, security, backup, and operational requirements.
Deleting your Invox account may not automatically delete emails from your original mailbox provider. To permanently remove email from your mailbox server, you may also need to delete it directly from your mail account or email provider.
Invox is intended for business and organizational email use. It is not directed to children. If you believe a child has provided personal information through Invox, please contact us so we can review and take appropriate action.
We may update this Privacy Policy from time to time. When changes are made, the updated effective date will be shown on this page. Continued use of Invox after changes means you accept the updated policy.