Data controller
Inkbox is the data controller for personal data collected through the platform.
As a professional email hosting provider, we act under the authority of customers (domain owners) for data relating to mailboxes and messages transiting through the service.
To exercise your rights or ask a question: privacy@inkbox.io
Data collected
In accordance with the provisions of Guinean law, we collect the following categories of data:
Identification data
Last name, first name, email address, login identifier, organization name
Connection data
IP address, browser, timestamps, access logs and traffic data
Usage data
Pages visited, features used, session duration
Billing data
Processed exclusively via Stripe (PCI-DSS Level 1) — not stored by us
Email data
Message content, attachments, aliases and domain configuration
Legal basis
Processing is based on the legal grounds provided for by Guinean law:
Consent
For non-essential cookies, marketing communications and optional processing
Performance of a contract
For the provision of the subscribed email hosting service
Legal obligation
For retention of billing data and combating cybercrime
Legitimate interest
For service security, fraud prevention and quality assurance
Purposes
Your data is processed in a determined, explicit and lawful manner for:
Data sharing
We never sell your personal data to third parties.
Data may be shared in the following limited cases:
Stripe
Secure payment processing (PCI-DSS Level 1 certified)
Hosting providers and subcontractors
Storage and processing of data under our authority and responsibility
Competent authorities
Only in response to a legal obligation, judicial order or request from the CERT
Your rights
In accordance with Guinean data protection law, you have the following rights:
Access
Obtain a copy of your personal data
Rectification
Correct inaccurate or incomplete data
Erasure
Request deletion of your data
Portability
Export your data in a reusable format
Objection
Object to certain processing
Restriction
Temporarily suspend processing
To exercise your rights, contact us at privacy@inkbox.io — Response within 30 days.
Data retention
Data is retained for no longer than necessary for the purposes of the processing, in accordance with Guinean legal obligations:
Subscription period
Account data
+ 30 days after termination
10 years
Billing data
Legal tax obligation
12 months
Security logs
Fraud prevention
You may request deletion of your account at any time. Data is anonymized or erased within 30 days of your request, except where legally required to be retained.
Security
We implement appropriate technical and organizational measures to protect your data against accidental or unlawful destruction, loss, alteration, disclosure or unauthorized access:
TLS 1.3
Transport
AES-256
Storage
Optional 2FA
Authentication
Strict RBAC
Access control
Quarterly
Audits
24/7
Monitoring
International transfers
No transfer of personal data to third countries is carried out without prior authorization from the competent Guinean authority and without a guarantee of a level of protection equivalent to that provided for by Guinean law. If a subcontractor outside the territory is used, we ensure these requirements are met.
Legal reference
This policy is established in accordance with the law relating to cybersecurity and the protection of personal data in the Republic of Guinea, in particular the following articles:
Contact
For any question relating to the protection of your data, contact us:
© 2026 Inkbox · Privacy Policy