Parties and roles
For customer content placed in an Inbxer Cloud workspace, the customer is the controller and Inbxer acts as processor. Inbxer processes that data only on documented instructions expressed through the agreement and use of the service.
Processing details
Processing covers hosting, organizing, searching, routing and securing support conversations, contacts, attachments and related workspace metadata for the duration of the Cloud subscription.
- Data subjects may include your customers, prospects and team members.
- Data may include contact details, support messages, attachments and account context.
- Purpose: delivering the support workspace and enabled features.
Security measures
Inbxer applies access controls, encryption in transit, environment separation, backups, logging and vulnerability management appropriate to the service and risk. More detail is available on the Security page.
Sub-processors
Inbxer may use infrastructure, email, monitoring and billing providers to operate Cloud. Each provider is bound by data-protection obligations. Customers will receive reasonable notice of material additions where required by law.
Data subject requests
Inbxer will reasonably assist the customer in responding to access, correction, deletion and portability requests. Requests from an end user will normally be redirected to the customer as controller.
Security incidents
Inbxer will notify affected Cloud customers without undue delay after confirming a personal-data breach and will provide available information needed for the customer’s legal obligations.
International transfers
Where protected data is transferred internationally, the parties rely on a lawful transfer mechanism, which may include the EU Standard Contractual Clauses and the UK Addendum where applicable.
Return and deletion
During the subscription, customers may export workspace data using available product tools or APIs. Following termination, customer data is deleted from active systems and then backups according to the retention periods described in the Privacy Policy, subject to legal requirements.