1. Who We Are
InboxStream (“we”, “us”, “our”) operates the website https://inboxstream.co (the “Site”) and provides a CRM, Voice AI integration, and marketing implementation service for auto shops, detailing shops, and car service centres (the “Service”).
Our contact email is: [[email protected]].
We are based in Pakistan and serve clients globally.
2. The Data We Collect
We collect data in three main ways:
Information you provide directly (as a prospective or active client):
Contact details: name, phone number, email address, company name and address.
Billing information: payment details you supply when paying an invoice (we do not store full credit card numbers; payments are handled via bank transfer, Payoneer, or similar methods).
Branding data, scripts, and preferences you share during setup.
Information collected automatically when you visit our Site:
Technical data: IP address, browser type, operating system, referring URLs, pages visited, time spent on pages, and clickstream data. This is collected via server logs and analytics tools (e.g., Google Analytics).
Data we process on behalf of our clients (auto shops):
When you use our CRM and Voice AI, you upload or collect information about your customers (names, phone numbers, email addresses, vehicle details, appointment records, call recordings, transcripts, and messages). You are the controller of that data; we act as a processor and handle it solely on your documented instructions.
3. How We Use Your Data
We use personal data for the following purposes:
To provide, maintain, and support the Service (CRM, Voice AI, automations, website builder).
To schedule and conduct setup/demo calls.
To send invoices and process payments.
To communicate service updates, security alerts, and support messages.
To analyse Site usage and improve our offerings.
To comply with legal obligations and enforce our Terms.
We do not sell your personal data or your customers’ data to third parties.
4. Voice AI & Third-Party Sub-Processors
The Voice AI feature is powered by external providers (e.g., Vapi, Retell, or similar). When a call is handled by the AI, the caller’s phone number, call recording, and transcript are processed by that provider. These providers are contractually bound to process data only as instructed by us. A list of current sub-processors is available on request.
5. Data Retention
We retain your account data as long as your account is active. Customer data you store in the CRM is retained until you delete it or your account is terminated. Call recordings/logs are kept for a maximum of [X days/months] unless you request earlier deletion.
6. Your Rights (GDPR / CCPA / Other)
Depending on your jurisdiction, you may have the right to:
Access, correct, or delete your personal data.
Object to or restrict processing.
Data portability.
Withdraw consent (where processing is based on consent).
Lodge a complaint with a supervisory authority.
To exercise any of these rights, email us at [[email protected]].
7. Cookies
Our Site uses essential cookies and analytics cookies. You can control cookies through your browser settings. Disabling cookies may affect some functionality.
8. International Transfers
Our operations are based in Pakistan. Data may be transferred to and processed in Pakistan or other countries where our sub-processors are located. We take appropriate safeguards to protect your data.
9. Changes to This Policy
We will post any changes on this page and update the “Last Updated” date. Continued use of the Service after changes constitutes acceptance.