Privacy Policy

Last updated: October 30, 2026

This Policy describes how we (MachTech, “we”, “us”) collect, use, store and protect personal data when you use the GetInbox service (the “Service”) and its website. Personal data is processed in accordance with the Law of the Republic of Armenia “On Protection of Personal Data”.

1. Whose data we process

• Our customers. Companies registered in the Service and their employees (users).
• Our customers’ clients. People who exchange messages with our customers through connected messengers. Our customer is the controller of this data; we process it only on the customer’s behalf and instructions in order to provide the Service.

2. What data we collect

• Account data: name, email, company name, role. Passwords are stored only as hashes and are never visible to us. If two-step login is enabled, the authenticator key and recovery codes (hashed).
• Service content: messages, contacts (name, phone number, username, picture), files and images, tags, tasks, form submissions and other data that you or your clients transmit through the Service.
• Technical data: IP address, browser type, sign-in times and activity logs, used for security and abuse prevention.
• Payment data: invoices, payment amounts and dates. We do not receive or store bank card details: card payments are made on the bank’s secure payment page.

3. How we use data

• to provide the Service, connect channels, send and receive messages;
• to keep accounts secure: sign-in, two-step verification, abuse prevention;
• to calculate charges, issue invoices and process payments;
• to provide technical support and answer your requests;
• to comply with legal obligations.

We do not sell personal data and do not use your or your clients’ conversations for advertising.

4. Who we share data with

To operate the Service, data may be shared only to the extent necessary with:

• Meta Platforms (WhatsApp, Messenger, Instagram), Telegram and TikTok, to send and receive messages when you connect these channels;
• Bitrix24, if you enable the Bitrix24 integration;
• Google, if you use Google sign-in or Google Sheets synchronization;
• artificial intelligence providers, only if you enable the AI assistant (message text is sent to suggest a reply), and a speech synthesis provider for voice broadcasts;
• the bank providing payment services, for card payments;
• hosting and network security providers (servers, Cloudflare);
• public authorities, only where and as required by the laws of the Republic of Armenia.

Some of these providers are located outside Armenia. They process data in accordance with their own privacy policies.

5. How long we keep data

Data is kept while the account is active. After the trial ends or payments stop, the account is suspended and the data is retained so that you can resume work. At your written request, the account and its data are deleted within 30 days, except for data we must keep by law (for example, accounting records).

6. How we protect data

• connections to the Service are encrypted (HTTPS);
• passwords are stored only as hashes; two-step login with an authenticator app is available;
• each company’s data is isolated from others, and employee access is limited by role and channel;
• our support staff can access your account only temporarily, for support purposes, and every action is logged.

7. Cookies and analytics

Strictly necessary cookies. Used to keep you signed in. The browser also stores interface preferences (such as the theme and language). The Service does not work without them.

Analytics and advertising measurement. On the website and in the Service we may use Google Analytics 4 (Google LLC), Yandex Metrica (Yandex LLC) and Meta Pixel (Meta Platforms, Inc.). These services set their own cookies and collect anonymous or pseudonymous data: pages viewed, button clicks (for example, “Start free”), device and browser type, approximate location based on the IP address and the source of the visit (ads, search, UTM tags). We may also report the fact of a registration to Meta from our server (Conversions API); the email is sent only as an irreversible SHA-256 hash. We use this data to improve the website and to measure the effectiveness of our advertising.

Inside the Service, Yandex Metrica session recording (Webvisor) is turned off, and your and your customers’ conversations, contacts and files are never sent to analytics services.

You can block or delete analytics and advertising cookies in your browser settings or with the opt-out tools of these services (for example, Google Analytics Opt-out). This does not affect how the Service works. Fonts are loaded from our own server.

8. Your rights

You have the right to obtain information about your data, request its correction, deletion or restriction of processing, withdraw consent and receive a copy of your data. To make a request, contact us at machtech.am. We respond within 10 business days. You may also file a complaint with the Personal Data Protection Agency of the Republic of Armenia.

If you are a client of one of our customers (you exchanged messages with a company through the Service), please send your request to that company. We will assist them in fulfilling it.

9. Our customers’ responsibility

Our customers are responsible for having a legal basis, such as consent, to process their clients’ data and to send them messages (including broadcasts) through the Service.

10. Age restriction

The Service is intended for businesses and is not directed at persons under 18.

11. Changes

We may update this Policy. We will notify you of material changes by email or in the Service. The date of the current version is shown at the top of this page.

12. Data received from Meta platforms (Facebook, Messenger, Instagram)

When you connect a Facebook Page or an Instagram Business account, we receive from Meta the identifier, name, username and access token of that Page/account, as well as the name, username, profile picture, messages and files of the people who write to you on that channel, and comments under your posts. We use this data only to show the channel’s conversations in GetInbox, to reply, and for the automations you configure.

• we do not sell the data, use it for advertising or profiling, or share it with data brokers;
• it is not used to train artificial-intelligence models;
• the Page access token is stored only on the server and is never shown to the browser;
• our processing of Meta platform data complies with the Meta Platform Terms and Developer Policies.

Deletion instructions: https://getinbox.app/en/data-deletion. When you remove the app in Facebook, we automatically delete the tokens of the channels you connected.

13. Contact

For any privacy question, contact us at machtech.am.