Privacy Policy

DMBox ("we") provides a team inbox, CRM, and automation platform that connects to messaging channels including the WhatsApp Business Platform, Instagram, and Facebook Messenger on behalf of the businesses that use it.

Data we process

When you connect a messaging channel, we process the messages, contact phone numbers/profile names, and message metadata needed to deliver inbox, CRM, and automation features. We store this data to operate the service for your team.

Google user data

If you connect Google Sheets, DMBox may access the Google spreadsheet files you select or authorize for workflow automation. This can include spreadsheet IDs, sheet names, column headers, row values, and metadata needed to append or update rows.

DMBox uses Google user data only to provide user-configured features, such as creating or updating Google Sheets rows from CRM, contact, booking, message, or workflow events, and keeping your Google Calendar in step with your appointments. We do not use Google user data for advertising, retargeting, credit decisions, or training AI models, and we do not sell Google user data.

If you connect Google Calendar to an appointment calendar, DMBox asks for the calendar.events and calendar.readonly permissions. DMBox uses them to list your calendars so you can choose which one receives bookings, to read your busy times so your booking page never offers a time when you are already busy, and to create, update or remove the event in the calendar you chose when someone books, reschedules or cancels an appointment with you. DMBox does not store or show the content of your other calendar events.

When you connect Google, DMBox also receives the email address of the Google account, so you can see which account is connected.

DMBox stores the minimum Google connection and configuration data needed to run the integration. OAuth tokens are stored securely and are not exposed in the user interface. People at DMBox do not read your Google user data, except with your permission, for security, or to comply with the law. We share it only with the infrastructure providers needed to run these features.

DMBox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You may disconnect the Google integration at any time in DMBox, remove DMBox's access from your Google account at myaccount.google.com/permissions, or request deletion of related data by contacting us.

How we use data

We use the data solely to provide the service: routing conversations, storing contacts, running the automations you configure, and showing delivery status. We do not sell personal data.

Data sharing

We share data with infrastructure providers (hosting, database, message delivery via Meta's APIs) strictly to operate the service.

Retention & deletion

We retain data while your account is active. You can request deletion at any time — see our Data Deletion instructions.

Contact

Questions: support@dmbox.ai.