Privacy at inboxtrusted

1. Who we are

inboxtrusted is a transactional email service operated by White Image, a company based in Bucharest, Romania (EU). For the personal data processed through your account, White Image acts as your data processor: you decide what to send and to whom, and we handle it on your behalf to deliver your email.

2. What we process

We process two broad categories of data:

• Account data — the information you give us to run your account: name, work email, company, phone and billing details.
• Sending data — the emails you send through us: recipient addresses, subject and content, plus delivery events such as deliveries, opens, clicks and bounces.

3. Why we process it

We use account data to provide and secure the service, handle billing and offer support. We use sending data solely to deliver your messages, give you delivery reporting, protect deliverability and prevent abuse. We do not read your message content except where strictly necessary to operate or troubleshoot the service.

4. Where your data lives

All data is processed and stored on infrastructure located in Europe. Unlike providers that run on US infrastructure, inboxtrusted keeps your data in Europe and does not transfer it outside Europe.

5. How long we keep it

Message content is retained for up to 7 days (on plans that include retention) so you can debug delivery, then deleted. Delivery event metadata is kept for reporting for a limited period. Account and billing data is kept for as long as your account is active and as required by law afterwards.

6. Sub-processors

We rely on a small number of carefully chosen providers (for example, Europe-based hosting and payment processing) strictly to run the service. We require each of them to meet GDPR obligations. A current list is available on request.

7. Your rights

Under the GDPR you can access, correct, export or delete your personal data, and object to or restrict certain processing. If you are a recipient of an email sent through inboxtrusted, the sender is the controller of your data — contact them first; we will support them in honouring your request.

8. Security

We protect data with TLS in transit, authenticated sending (DKIM, SPF, DMARC), scoped API keys and continuous monitoring, backed by monthly third-party security audits aligned with ISO standards. Read more on our security page.

9. Contact

For any privacy question or to exercise your rights, email privacy@inboxtrusted.com. You also have the right to lodge a complaint with your local data protection authority.

This page explains our privacy practices in accessible terms and is not a substitute for a full contractual Data Processing Agreement, which we provide to customers on request.