GDPR Compliance Statement
Effective Date: May 21, 2025
Company Name: Excellanto Ventures
Website: https://inboos.com
Location: New Delhi, India
At Inboos.com, we are fully committed to protecting the privacy and personal data of our users in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679, which came into effect on May 25, 2018.
This GDPR Compliance Statement outlines how we collect, use, process, and protect personal data for users within the European Economic Area (EEA).

1. Your Rights Under the GDPR
   If you are located in the EEA, you have the following rights regarding your personal data:
   Right to Access: You can request a copy of the personal data we hold about you.
   Right to Rectification: You may correct or update inaccurate or incomplete data.
   Right to Erasure (Right to Be Forgotten): You can request deletion of your personal data under specific conditions.
   Right to Restrict Processing: You can request that we limit the processing of your data.
   Right to Data Portability: You can request a copy of your data in a machine-readable format.
   Right to Object: You can object to certain uses of your data, including marketing.
   Right to Withdraw Consent: You may withdraw your consent at any time where processing is based on consent.
   To exercise any of these rights, please contact us at support@inboos.com. We will respond within 30 days in compliance with GDPR requirements.
2. Legal Bases for Processing Data
   We process your personal data based on one or more of the following legal grounds:
   Consent: You have given explicit permission (e.g., opting into emails).
   Contractual Necessity: To fulfill our service agreement with you.
   Legal Obligation: To comply with applicable laws or regulations.
   Legitimate Interests: For purposes such as fraud prevention, product improvement, or customer support (balanced with your rights).
3. Data We Collect Under GDPR
   We may collect and process the following types of personal data:
   Name, email, phone, address (for billing and communication)
   Contact lists and email campaign content (if uploaded by you)
   Login data, IP address, browser info
   Engagement metrics (opens, clicks, bounces) for emails
   We collect only the minimum necessary data to deliver our services.
4. Data Processor and Data Controller Roles
   You (the client) are the Data Controller of any contact lists, messages, or personal data you upload to our platform.
   We (Inboos.com) act as your Data Processor, handling data solely on your instructions, as per GDPR Article 28.
5. Data Processing Agreements (DPAs)
   If your organization requires a signed Data Processing Agreement, we are happy to provide one. Please contact us at support@inboos.com to request and execute the DPA.
6. Data Retention and Deletion
   We retain personal data only for as long as necessary for:
   Service delivery and usage tracking
   Legal and accounting obligations
   Customer support and fraud prevention
   You can request full data deletion at any time, and we will confirm within 30 days of your verified request.
7. Cross-Border Data Transfers
   Your data may be processed outside the EEA (e.g., in India or the U.S.). We use secure servers and require all third-party processors to comply with data protection standards equivalent to GDPR. These transfers are protected by:
   Standard Contractual Clauses (SCCs)
   Data processing agreements with third-party vendors
8. Data Security Measures
   We implement industry-standard technical and organizational measures, including:
   HTTPS/TLS encryption
   Two-factor authentication for access
   Role-based access controls
   Regular backups and vulnerability scans
   Encrypted API endpoints
9. Data Breach Notification
   In the event of a data breach that may impact your personal data, we will notify you and the appropriate supervisory authority within 72 hours as required under GDPR Article 33.
10. Supervisory Authority Contact
    If you are dissatisfied with our data handling practices, you have the right to lodge a complaint with your local data protection authority. For EU users, this may be your country’s Data Protection Authority (DPA).
11. Contact Information
    To make a GDPR-related request or inquiry, contact us:
    Excellanto Ventures
    New Delhi, India
    Email: support@inboos.com
    Website: https://inboos.com