Legal & trust center

These documents form the contract and transparency surface for a trust-first SaaS that handles sensitive email, encryption, AI drafting, retention (TTL), and enterprise audit features. They are provided for public and in-app inspection. For signed-in users, the same index lives at Settings → Legal.

Core platform agreements

Private beta / early accessBeta Programme TermsAdditional terms for private beta participation — pre-release software, feedback licence, and liability.General contract lawTerms of ServiceMaster agreement covering accounts, billing, TTL deletion, liability, and availability.Platform integrity / abuse preventionAcceptable Use PolicyProhibited uses of the composer, AI endpoints, APIs, and the InboxDays platform.

Privacy & regulatory

GDPR, UK GDPR, CCPA, Google OAuthPrivacy PolicyWhat data we collect, why, where it lives, retention, and how to exercise your rights.ePrivacy, GDPRCookie & Tracking DisclosureEssential session storage, OAuth tokens, and any analytics preferences.

Product-specific disclosures

EU AI Act guidance, FTCAI Data Privacy & Model Ethics StatementDetailed breakdown of AI processing via AWS Bedrock, our absolute Zero Model-Training commitment, and ephemeral data handling policies.Risk & liability mitigationZero-Knowledge Cryptographic & Key Loss DisclaimerImportant disclosure regarding client-side encryption, key ownership, and zero-server data recovery limits for the InboxDays Vault.

Enterprise governance

GDPR Art. 28Subprocessor DirectoryThird parties that process user or system data on InboxDays’ behalf.GDPR Art. 28Data Processing AddendumProcessor terms for enterprise customers, including cross-border transfer mechanisms.

Subscription & billing

FTC Click-to-Cancel, card network rulesCancellation & Refund PolicyAuto-renewal, self-serve cancel, and refund rules for paid plans.

Security & trust

SOC 2 / ISO readiness, general trustSecurity & Vulnerability PolicyHow we protect the platform and how to report vulnerabilities responsibly.

Availability matrix. Core agreements are linked from the site footer and accepted at registration. AI privacy is linked from the AI Composer. Zero-knowledge disclaimer is linked from Vault / secure-message flows. Subprocessors and security live at dedicated public URLs for enterprise IT review.