Inkbox procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ Inkbox may process, transfer, and store information in the United States and other countries where Inkbox or its service providers operate, subject to these Terms, the Privacy Policy, the DPA where applicable, and applicable law.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes under California’s “Shine the Light” law. To make such a request, please email us at privacy@inkbox.ai .” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We retain personal information for as long as needed or permitted in light of the purposes for which it was obtained as outlined in this Privacy Policy unless a longer retention period is required or permitted by applicable law. The criteria used to determine our retention periods include: The length of time we have an ongoing relationship with you (for example, for as long as you keep using our Services); Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records or communications for a certain period before we can delete them); or Whether retention is advisable considering our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties. This includes any third party operating any website or service to which our Services link. The inclusion of a link on our Services does not imply endorsement of the linked site or service by us. In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer, including with respect to any personal information you disclose to other organizations through or in connection with the Services or on social media.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ At a customer's direction, Inkbox may provide Customer Data to an MCP client that the customer authorizes. Customer Data may include emails, messages, attachments, call records and transcripts, contacts, notes, identity details, and account configuration. An authorized client may also request communications or other account actions within the access granted by the customer. Data delivered to a connected service is also handled under that service's terms and privacy notice. Customers choose which services and identities to authorize and are responsible for reviewing those services' data practices. Inkbox's processing of Customer Data remains governed by our Terms of Service and Customer Data Protection Addendum .” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Services may interoperate with, rely on, or provide access to third-party products, services, platforms, models, software, networks, communications providers, payment processors, and other third-party offerings (collectively, “ Third-Party Services ”). Third-Party Services are not controlled by Inkbox, and Inkbox is not responsible for any Third-Party Services or for any acts, omissions, terms, policies, outages, changes, errors, or failures of any third-party provider. Customer’s use of Third-Party Services may be subject to separate terms, policies, fees, and usage limits imposed by the applicable third party. Customer is solely responsible for complying with those terms, policies, fees, and usage limits. Inkbox does not control or endorse, and makes no representations or warranties regarding, any Third-Party Services. Customer accesses and uses Third-Party Services at its own risk.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Services may provide functionality allowing you to make payments to us using third-party payment services. When you use such a service to make a payment, your personal information will be collected by such third party and not by us, and will be subject to the third party’s privacy policy, rather than this Privacy Policy. We have no control over, and are not responsible for, this third party’s collection, use, and disclosure of your personal information.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Social Media Information we collect from social media sites may include details such as profile pictures, social media account ID, and other public social media profile information. Other Third Parties We may collect information from sources such as publicly available databases, marketing partners, third-party providers, and data brokers. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Here are the types of entities to which we may disclose personal information in providing the Services. Service Providers We use service providers that provide hosting, information technology, customer support, email and communications delivery, and analytics services for the purposes listed above. Professional Advisors We use accountants, actuaries, auditors, experts, consultants, lawyers, banks, and financial institutions to support our business. Authorities and Others If we are required by law or legal process or if we deem the disclosure appropriate for other legal, compliance or fraud-prevention purposes, we may disclose personal information to law enforcement, public, regulatory, and government authorities, courts, or other entities that obtain valid subpoenas. Other Online Services When you interact with us, you may choose to share information and content on our social media pages and other online services. Business and Marketing Partners We may share your personal information with our business and marketing partners to allow them to provide you with certain services, advertisements, or promotions. Our business and marketing partners may use your information in accordance with their own privacy notices. Business Transferees We may disclose or transfer your personal information to third parties such as acquiring entities and their advisors in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings). ” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.