InboxPrivacy Policy & Data Protection
Last updated: 8 July 2026
This Privacy Policy explains how Tvaram Private Limited("Tvaram", "we", "us") collects, uses, stores and protects personal data when you use InboxValid (the "Service"). We are the data controller for account data, and a data processor for the contact lists you submit for verification. It should be read together with our Terms of Service.
1. Data we collect
We collect the following categories of data:
| Category | Examples |
|---|---|
| Account data | Name, email address, organisation, authentication identifiers managed through our auth provider. |
| Billing data | Credit purchases, invoices and payment references. Card and bank details are handled by Razorpay; we do not store full payment instrument numbers. |
| Verification data | Email addresses and any list fields you upload or submit through the API for verification, and the results we generate. |
| Usage & technical data | Log data, IP address, device and browser information, API usage, and cookies needed to run the Service. |
| Support data | Messages and attachments you send us through support tickets or email. |
2. How we use data
We process personal data to:
- Provide, operate and secure the Service and verify the addresses you submit;
- Process payments, issue invoices and manage your credit balance;
- Provide customer support and respond to your requests;
- Detect, prevent and investigate fraud, abuse and security incidents;
- Improve and develop the Service, using aggregated or de-identified data where possible;
- Comply with legal obligations and enforce our terms.
3. Legal basis
Depending on the applicable law, we process personal data on the basis of performing our contract with you, your consent, our legitimate interests in running and securing the Service, and compliance with legal obligations. Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we process account data with your consent and for legitimate uses connected to providing the Service you requested.
4. Contact lists you submit
When you upload or submit email addresses for verification, we act as a processor on your behalf. We use that data only to perform the verification you requested and to produce results. You are the controller of that data and are responsible for having a lawful basis to process it. We do not sell your lists, do not use them to send marketing, and do not share them with other customers. Verification jobs and their results are retained so you can access your history, and can be deleted on request.
5. Sharing & sub-processors
We do not sell personal data. We share it only with service providers who help us run InboxValid, under contracts that require them to protect it, including:
- Our authentication provider, for sign-in and account management;
- Razorpay, our payment processor, for payments and invoicing;
- Cloud and infrastructure providers that host the Service;
- Analytics and communication tools used to operate and support the Service.
We may also disclose data where required by law, to enforce our terms, or to protect the rights, safety and security of Tvaram, our users and the public.
6. Data retention
We keep personal data only as long as needed for the purposes above: for the life of your account, and thereafter as required to meet legal, tax and accounting obligations or to resolve disputes. When data is no longer needed, we delete or anonymise it. You can request deletion of your account and associated data at any time.
7. Security
We protect data with technical and organisational measures appropriate to the risk, including encryption in transit (TLS), access controls, encrypted storage and backups of our databases, network isolation, and least-privilege access for our team. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authority of a breach where the law requires.
8. Your rights
Subject to applicable law (including the DPDP Act and, where relevant, the EU/UK GDPR), you may have the right to access, correct, update or delete your personal data, to withdraw consent, to object to or restrict certain processing, to data portability, and to nominate another person to exercise your rights in the event of death or incapacity. To exercise these rights, email privacy@inboxvalid.ai. We will respond within the timeframes the law requires. You also have the right to lodge a complaint with the Data Protection Board of India or your local supervisory authority.
9. International transfers
We are based in India and our infrastructure may be located in India or other countries. Where we transfer personal data across borders, we do so in accordance with applicable law and put in place appropriate safeguards.
10. Cookies
We use cookies and similar technologies that are necessary to sign you in, keep the Service secure and remember your preferences. You can control cookies through your browser, but disabling essential cookies may stop parts of the Service from working.
11. Children
The Service is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
12. Changes
We may update this Policy. Material changes will be notified by email or in the Service. The current version is always available on this page.
13. Contact & grievances
For any privacy question or to reach our Grievance Officer, email privacy@inboxvalid.ai. Full company and grievance-officer details are on the Contact & Company page.