1. Who operates Inboxful
Inboxful is a business CRM product operated by Albokhary Business Solutions (البخاري لحلول الأعمال), Egypt. Commercial Register: 316660, Cairo Investment Commercial Registry. Contact us at hello@albokharysolutions.com. Company website: albokharysolutions.com.
This notice covers Inboxful workspaces and their connected services. A business using Inboxful normally determines why its customers' and employees' information is processed and acts as controller; we process workspace information on its documented instructions as service provider. We separately determine processing for our own business enquiries, subscription administration, support and service security. The roles depend on the actual activity and applicable law. The company website's visitor notice is separate.
2. Information processed
Depending on the enabled features and information you provide, Inboxful processes:
- Workspace users' names, work emails, roles, access records and operational activity.
- Customer names, contact details, social/channel identifiers and profile images where the connected provider makes them available with appropriate permissions.
- Message and comment text, timestamps, delivery events, attachments, voice messages and, when enabled, transcripts.
- Service cases, notes, assignments, callbacks, feedback, communication preferences and consent records.
- Business records such as leads, deals, quotations, contracts, orders and ERP lookup results. Optional field-service features can include visit addresses, staff check-in locations, photos and signatures.
- Connected business-asset identifiers and authorization credentials needed to operate the selected connections. These are distinct from customers' passwords.
- Technical records needed for authentication, security, troubleshooting and service operation.
Connecting a channel does not automatically import all historical conversations. Please avoid sending information unnecessary for your enquiry. Special-category information requires a separately assessed lawful use and suitable safeguards; this service is not a general medical-record system.
3. Meta and WhatsApp information
When a business authorizes a connection, Inboxful uses the approved access for its selected Facebook Pages, professional Instagram accounts or WhatsApp Business accounts and numbers. Depending on the connection, this includes identifying authorized assets, receiving and responding to messages, displaying available sender details, handling comments and delivery events, and managing WhatsApp messaging templates where enabled. We access only the data made available through the authorized integration; granting one connection does not give access to all of a person's Facebook or Instagram content.
Businesses remain responsible for the lawfulness of their messages, recipient permissions and Meta's messaging rules. Marketing features must respect recorded preferences and applicable consent requirements. Meta also processes information under its own terms and privacy notices.
4. Why information is used
Information is used to provide the requested service, route and answer enquiries, manage customer relationships and business transactions, maintain security, support users and produce operational reports. The applicable legal basis depends on the activity and jurisdiction, including valid consent where required and other grounds permitted by applicable law. The customer business must establish the basis for its workspace activities. A connection authorization is not blanket consent for every other use of the data.
5. Automation and AI
If enabled, Cloudflare Workers AI can process selected messages, relevant customer/case context and approved knowledge to provide summaries or suggested replies. Voice transcription sends the relevant audio to that service and stores the resulting text. The AI Agent assists a human, who reviews and sends the reply. The separate Chatbot can provide approved knowledge-base answers automatically under administrator-configured rules. Outputs may be inaccurate; contact the business for human assistance. This notice does not authorize training general-purpose AI models on Meta data or unrestricted reuse of customer content.
6. Who receives information and where
Authorized workspace staff and authorized support personnel may access information for their assigned duties. Cloudflare provides hosting, database, file storage and, when enabled, AI processing. Meta provides the connected messaging services. Company correspondence sent to our support email is handled through Zoho Mail. A customer may configure additional ERP or service integrations and create authorized exports on its own systems.
Service providers may process information outside Egypt. The specific hosting configuration, processor terms and applicable transfer requirements must be addressed for the deployment. We do not promise storage only in Egypt or a particular Gulf country. Disclosure may also be required by applicable law or a valid legal process. This notice does not grant permission to sell platform data or use it for unrelated advertising.
7. Retention and deletion
Workspace information is retained for the purposes of the service, the customer's documented retention instructions and applicable obligations. Retention varies by record type, enabled feature and deployment; it is not an unlimited right to retain personal information. A record in a recycle bin or a disconnected channel is not necessarily deleted from storage.
Approved deletion requests remove or redact personal content from applicable workspace records and linked files. We verify the scope completed and explain any lawful retention restriction. Limited non-content record and replay-prevention metadata may remain for documented purposes. Independent exports, backups and processor copies require separate handling; restored backups must not reinstate erased information.
8. Your requests and choices
Subject to applicable law, you may request access to, correction or deletion of your information, withdraw consent where processing relies on consent, or object to relevant processing. Contact the business you dealt with or email hello@albokharysolutions.com identifying that business and the relevant account or interaction. We may request proportionate identity verification and coordinate with the responsible business. Do not send passwords, access tokens or verification codes. Requests are handled within applicable statutory periods; any limitation will be explained. You may raise unresolved concerns with the competent data-protection authority, including Egypt's Personal Data Protection Center where applicable.
Removing a Meta integration stops its authorized connection but is not itself a request to delete existing workspace records. See the separate Inboxful Data Deletion Instructions.
9. Security, storage in your browser and updates
Inboxful uses access controls and authentication appropriate to its configuration. Browser storage and session mechanisms support sign-in, preferences and service operation. No system can guarantee absolute security. Deployment-specific analytics or non-essential tracking must be assessed and disclosed before introduction. Material changes to this notice will be communicated through the service or appropriate contact channel, and the published version will state its effective date.