Privacy Policy
Last updated October 25, 2026
This policy explains what information Mailboxer collects, how we use it and the choices you have. Mailboxer is operated by InnovativeLabs ("Mailboxer", "we", "us"). If you have questions, email hello@mailboxer.io.
Information we collect
- Account information: your name, email address, company and password when you sign up.
- Website forms: the name, email address, company and anything else you share when you fill in a form on our website.
- Billing information: plan, billing history and payment details. Card payments are handled by our payment processor; we don't store full card numbers.
- Connected accounts: the mailboxes, calendars and tools you connect, including the access details needed to send and receive on your behalf. Mailbox passwords and tokens are stored encrypted.
- Customer content: leads you upload or find, campaigns, sequences, messages, replies and the rules and company details you give Reply Agent.
- Usage data: log data, device and browser details, and how you use the product, so we can keep it running, secure and improve it.
How we use information
- To provide the service: sending your campaigns, warming up mailboxes, checking deliverability, collecting replies and running the AI features you turn on.
- To bill you, support you and send you service messages such as receipts, security notices and changes to these policies.
- To send you marketing and follow-up emails about Mailboxer, such as tips, product news and offers. See Marketing emails below.
- To protect the service, our customers and email recipients, including detecting spam and abuse.
- To improve the product. We don't sell your personal information.
Marketing emails
When you sign up for Mailboxer or fill in a form on our website, we may use your contact details to send you marketing and follow-up emails about Mailboxer, such as tips, product news and offers. Every marketing email has an unsubscribe link, and you can opt out at any time by clicking it or by emailing hello@mailboxer.io. Opting out of marketing emails doesn't stop service messages, such as receipts and security notices, which we send while you have an account.
Your customer content and leads
You control the leads and content you put into Mailboxer. For that data we act as your service provider (processor) and use it only to provide the service to you. You're responsible for having a lawful basis to contact your leads and for honoring their requests.
AI features
When you use AI features such as AI first lines, research cards, AI replies and Reply Agent, the relevant content is sent to our AI providers to produce the result. We don't allow those providers to train their models on your content.
Sharing
We share information only with service providers who help us run Mailboxer (for example hosting, payments, email delivery and AI processing), when you ask us to (for example connecting a CRM or a LinkedIn tool), when required by law, or as part of a merger or sale of the business.
Retention and deletion
We keep your information while your account is active. You can delete content in the app, and you can ask us to delete your account by emailing hello@mailboxer.io. Some records, such as invoices, are kept as long as the law requires.
Security
We use encryption in transit and at rest for sensitive data, access controls and monitoring. No system is perfectly secure, so please use a strong password and tell us right away if you suspect unauthorized access.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to certain uses. Email hello@mailboxer.io and we'll respond within the time the law requires.
Recipients of emails sent with Mailboxer
If you received an email sent through Mailboxer, the sender is our customer and is responsible for that message. Every campaign email includes a way to unsubscribe. You can also email hello@mailboxer.io and we'll pass on or act on your request.
Cookies and tracking
Cookies are small files a website stores in your browser. Some are needed for the site to work. Others come from analytics and advertising companies and help us understand how the site is used and whether our ads work. This section lists every one we use on Mailboxer's website.
Cookies the site needs
These are always on because the site can't work properly without them. They aren't used for advertising.
| What | What it does | Main cookies | How long | Provider's policy |
|---|---|---|---|---|
| Your cookie choice Mailboxer | Remembers whether you accepted or rejected cookies, so we don't ask again. | mailboxer_consent (stored in your browser, not sent to us) | Until you clear your browser data or change your choice | This policy |
| Sign-in (app only) Mailboxer | Keeps you signed in and protects your account when you log in at app.mailboxer.io. The marketing site itself doesn't sign you in. | Session cookie set by app.mailboxer.io | Until you sign out or the session ends | This policy |
| Hosting and security Our web host | Delivers the pages and blocks attacks. It sees your IP address but sets no tracking cookies. Fonts and videos are served from our own site. | None | Not applicable | This policy |
Analytics and advertising
If you're in the European Economic Area, the UK or Switzerland, none of these run until you click Accept on our cookie banner. Everywhere else they're on by default, and you can turn them off at any time as described below.
| What | What it does | Main cookies | How long | Provider's policy |
|---|---|---|---|---|
| Google Tag Manager | Loads and manages the other tags on this list. It sets no cookies of its own. | None | Not applicable | Privacy policy |
| Google Analytics 4 | Counts visits and shows which pages people use, so we can improve the site. | _ga, _ga_<ID> | Up to 2 years | Privacy policy |
| Google Ads | Measures whether our Google ads lead to sign-ups or orders, and lets us show ads to past visitors. | _gcl_au, _gcl_aw; IDE, test_cookie (on doubleclick.net) | _gcl: 90 days; IDE: up to 13 months; test_cookie: 15 minutes | Privacy policy |
| Meta Pixel Meta (Facebook, Instagram) | Measures our Facebook and Instagram ads and lets us show ads to past visitors. | _fbp; fr (on facebook.com) | 90 days | Privacy policy |
| LinkedIn Insight Tag | Measures our LinkedIn ads, gives us anonymous visitor reports and lets us show ads to past visitors. | li_sugr, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory, li_fat_id | From 1 day (lidc) up to 1 year (bcookie); most 30 to 90 days | Privacy policy |
| Microsoft Advertising (UET) Microsoft (Bing) | Measures our Bing ads and lets us show ads to past visitors. | _uetsid, _uetvid; MUID (on bing.com) | _uetsid: 1 day; _uetvid and MUID: up to 13 months | Privacy policy |
| X (Twitter) Pixel X Corp. | Measures our ads on X and lets us show ads to past visitors. | personalization_id, muc_ads, guest_id (on x.com / twitter.com) | Up to 13 months | Privacy policy |
| Reddit Pixel | Measures our Reddit ads and lets us show ads to past visitors. | _rdt_uuid | 90 days | Privacy policy |
Sharing with advertising platforms
When the advertising tags run, the companies above receive information such as the pages you visit, your IP address, browser details and the cookie IDs listed, and they may link it to your account with them. We use this to measure our ads and to show ads to people who have visited our site. Each company uses the data under its own privacy policy, linked above.
How to opt out
- Cookie settings: click Cookie settings (also in the footer of every page) to accept or reject analytics and advertising cookies, or to change your mind later.
- Global Privacy Control: if your browser sends the Global Privacy Control (GPC) signal, we treat it as an opt-out and the advertising tags stay off.
- Your browser: you can block or delete cookies in your browser settings. Blocking every cookie may stop parts of some sites from working.
- The companies' own controls: Google Analytics opt-out, Google ad settings, Meta ad preferences, LinkedIn ad opt-out, Microsoft ad settings, X ad settings and Reddit privacy settings. You can also use optout.aboutads.info (US) or youronlinechoices.eu (Europe).
California: Do Not Sell or Share My Personal Information
We don't sell your personal information for money. Letting advertising platforms collect data through the tags above to show you ads on other sites can count as "sharing" under California law. To opt out, click Cookie settings and choose Reject, or turn on Global Privacy Control in your browser, which we honor automatically. You can also email us at hello@mailboxer.io.
Changes
If we make material changes to this policy, we'll update the date above and tell account holders by email or in the app.
Contact
InnovativeLabs
Email: hello@mailboxer.io