Privacy Policy

1. Introduction & Overview

At Talkinbox ("Talkinbox", "we", "our", or "us"), we take your privacy and the security of your business and customer conversations seriously. This Privacy Policy explains what information we collect when you use our website, dashboard, APIs, and connected messaging integrations (WhatsApp, Instagram, Facebook Messenger, and TikTok), and how that information is processed and protected.

2. Information We Collect

We collect information in three categories to deliver reliable omnichannel messaging and AI automation:

• Account & Profile Information: When you register for Talkinbox, we collect your name, business email address, company name, phone number, and billing details.
• Connected Channel Authorizations: When you link your WhatsApp Business account, Facebook Page, Instagram Professional account, or TikTok account, we receive authorized OAuth tokens and channel identifiers (such as Page IDs and Phone Number IDs) via official API channels to securely deliver messages.
• Customer Conversation & Catalog Data: We process inbound and outbound messages, customer phone numbers or usernames, timestamps, delivery statuses, product catalogs, and inventory numbers that you configure in Talkinbox so that our AI agents and shared team inbox can operate.

3. How We Use Your Data

Talkinbox uses collected data exclusively for the following operational purposes:

• To route, deliver, and display customer messages across WhatsApp, Instagram, Messenger, and TikTok in real time.
• To enable AI agents to verify live warehouse stock, calculate prices, and respond to customer questions accurately based on your uploaded business data.
• To maintain team collaboration features such as conversation assignment and internal staff notes.
• To generate conversation analytics, response time metrics, and AI resolution percentages for your team.
• To provide customer support and troubleshoot technical anomalies.

4. Third-Party Platform Data Sharing

To deliver multi-channel messaging, Talkinbox communicates directly with official platform APIs:

• Meta Platforms, Inc.: Inbound and outbound WhatsApp, Instagram, and Facebook Messenger communications are transmitted through official Meta Cloud and Graph APIs in accordance with Meta Platform Terms.
• TikTok Pte. Ltd.: TikTok Direct Messaging interactions are transmitted through official TikTok for Business endpoints.
• Payment Providers (eSewa / Khalti): When generating checkout links, only relevant transaction identifiers and order amounts are passed to secure payment gateways. Talkinbox does not store credit card numbers or banking PINs.

5. Data Security & Encryption

We implement industry-standard administrative, physical, and technical safeguards to protect your information:

• All web traffic and API payloads are encrypted in transit using TLS 1.3 (HTTPS).
• Channel authorization tokens and webhook secrets are stored with encrypted credentials at rest.
• Access to internal databases is restricted via strict role-based access control (RBAC) and audited regularly.

6. Data Retention & Your Rights

You maintain ownership and control of your business and conversation data:

• Access & Export: You can export conversation logs, customer contact lists, and order summaries at any time from your Talkinbox dashboard.
• Right to Deletion: Upon closing your account or submitting a formal data deletion request to privacy@talkinbox.app, we permanently purge your stored conversation records, tokens, and customer lists from our primary databases within 30 days.
• Channel Disconnection: You can disconnect any channel (WhatsApp, Instagram, Messenger, TikTok) at any moment, immediately revoking our ability to receive or send messages on that channel.

7. Contact Our Privacy Team

For privacy-related inquiries, data access requests, or regulatory questions, reach out to our privacy officers: