Privacy policy

Airbox is an AI powered lead management system for businesses that market online and sell offline. It is operated by Airbox Technologies Private Limited, CIN U62091MH2025PTC459830, registered at B-1605 Oceania, Dosti Eastern Bay, Wadala (E), Antop Hill, Mumbai, Maharashtra 400037, India. You can reach us at contact@helloairbox.com.

Customers. Businesses that hold an Airbox licence, and the staff they invite. For this data we decide how it is used, so we are the data fiduciary.

Leads. People who enquire with one of our customers, through an advert, a portal, a landing page or a message. That data belongs to the customer. We process it on the customer’s instructions, so for leads the customer is the data fiduciary and we are its processor. If you are a lead, the business you enquired with is the first place to go with a question about your data.

Website visitors. People who browse this website or ask us for a demo.

• Account data: name, email address, phone number, role, profile photo, organisation name and licence details, sign-in records and security settings.
• Lead data: what a lead submits, usually their name, phone number, email address, the project and unit they asked about and their message, together with where the enquiry came from, such as the ad, campaign and form. Also what a customer’s team records against the lead, such as its stage and who it is assigned to.
• Content customers create: projects, units, prices, media, landing pages, message templates, pipelines and team settings.
• Connected platform data: when a customer connects a channel such as Meta, the access tokens and identifiers for the Pages, forms and ad accounts they choose, and the leads those produce. We do not receive anyone’s personal profile, friends or posts.
• Demo requests: the name, work email, phone number, company, team size and message you type into the request form on this website, and the IP address it was sent from.
• Billing data: invoices, GST details and payment status. Card and UPI details are handled by our payment gateway, Razorpay, and never reach us.
• Technical data: IP address, browser, device and errors, recorded in server logs for security and reliability.

• To run the platform: bring leads in from connected channels, assign them to the right person, send the messages customers ask us to send, and publish the landing pages they create.
• To draft messages with AI when a customer asks for it. The request and the project details it needs are sent to our AI provider, Anthropic, for that request only. They are not used to train AI models.
• To calculate performance figures for a customer’s own team, such as response times, follow-up discipline and conversion.
• To reply to demo requests and set up the call.
• To bill, invoice and collect payment.
• To keep the service secure, investigate misuse and meet our legal obligations.
• To tell customers about their account, changes to the service, and support.

We do not sell personal data. We do not use lead data to market to leads ourselves, and we never share one customer’s data with another.

When a customer connects a Facebook Page, Airbox uses Meta’s APIs to receive the leads submitted through that Page’s lead forms, with the form, ad and campaign identifiers Meta attaches. We use this data only to deliver those leads into the customer’s pipeline and to show where each lead came from. We keep it for as long as the customer’s licence is active and delete it with the rest of their data when the licence ends. Our use follows the Meta Platform Terms and Developer Policies.

A customer can stop new leads arriving at any time by removing Airbox from their Facebook Business settings. To have Meta data already received deleted, see requesting deletion below.

Only with service providers who help us run Airbox, each bound to use the data solely for that purpose:

• Cloud providers that host our servers, database and files, and send our email.
• Razorpay, for payments and payment mandates.
• Anthropic, for AI drafting, one request at a time.
• The channels a customer chooses to connect, such as Meta and Google, to receive leads from them.

We also disclose data where the law requires it, or where it is needed to protect the rights and safety of our customers, the public or Airbox.

• Customer and lead data: while the licence is active, then for an export window after it ends so the customer can take a copy. After that window we delete it from our live systems, and from backups as they cycle out.
• Demo requests: while we are in conversation with you, and for no more than two years after we last heard from you.
• Invoices and tax records: for as long as Indian tax law requires.
• Server logs: for as long as they are useful for security, and then deleted.

Data is encrypted in transit and at rest. Personal details such as names, phone numbers and addresses are also encrypted individually inside the database, so a copy of the database alone does not reveal them. Each customer’s data is kept in a database of its own, never pooled with another customer’s. Access within Airbox is limited to the people who need it to run and support the service.

You can ask us for a summary of the personal data we hold about you, ask us to correct or complete it, ask us to delete it, and withdraw consent where we rely on it. You can also nominate someone to act on these rights for you if you are unable to.

Customers can manage much of their own data in the admin: archive projects, deactivate staff, delete templates and media, and export everything when a licence ends. For anything else, write to us.

If you are a lead, please contact the business you enquired with first, since it decides how your data is used. If you cannot reach them, write to us and we will help.

Email contact@helloairbox.com with the subject “Data deletion request”, from the email address you used with us or that a business has on record for you, and tell us which organisation you dealt with. We confirm we have received it within 7 days and complete the deletion within 30 days, except for records the law requires us to keep.

If you are unhappy with how we have handled your data, write to our grievance officer at contact@helloairbox.com with the subject “Grievance”. We reply within 7 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

This website does not use cookies for advertising or tracking. The Airbox admin uses a cookie to keep you signed in, and nothing else.

Airbox is a business tool and is not meant for anyone under 18. We do not knowingly collect data about children.

We will post any change here and update the date at the top. If a change materially affects how we handle customer data, we will email licence holders before it takes effect.