Privacy Policy

CleverlyBox ("CleverlyBox," "we," "us," or "our") is operated by Webliska.AI. This Privacy Policy describes how we collect, use, share, and protect personal information when you use the CleverlyBox website, dashboard, applications, and related services (collectively, the "Service"). It also explains the rights you have over your information under applicable privacy laws including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

If you do not agree with this Policy, please do not access or use the Service. By accessing or using the Service you confirm that you have read and understood this Policy.

1. Introduction & scope

This Policy applies to information collected through:

• The CleverlyBox marketing website at cleverlybox.com.
• The CleverlyBox dashboard application at cleverlybox.com.
• Any documentation, support channels, or related properties operated by CleverlyBox.

It does not apply to third-party services (such as Amazon SES, SendGrid, Mailgun, ZeroBounce, Stripe, or other integrations) that you connect to your CleverlyBox account. Those services are governed by their own privacy policies, which we encourage you to read.

2. Information we collect

We collect information in three categories.

Information you provide to us

When you sign up, contact us, or use the Service, you may provide:

• Account information: name, email address, password (hashed), billing address, company name.
• Payment information: handled by our payment processor; we do not store full card numbers.
• Content you upload: subscriber lists, campaign content, automation definitions, custom fields.
• Communications: emails to support, sales inquiries, feedback you submit.

Information collected automatically

When you use the Service we automatically collect:

• Log data: IP address, browser type, operating system, referring URL, pages viewed, timestamps.
• Device information: device identifiers, browser fingerprint metadata for fraud prevention.
• Usage data: features used, frequency and duration of sessions, click and engagement patterns within the dashboard.
• Cookies and similar technologies: see Section 5.

Information from third parties

If you connect a third-party service to CleverlyBox (such as a sending provider, verification service, or CRM integration), we may receive limited information from that service to enable the integration — for example, sending statistics, bounce notifications, or contact synchronization payloads.

3. How we use information

We use information to:

• Provide, maintain, and improve the Service.
• Process your payments and manage your subscription / lifetime license.
• Authenticate your identity and prevent unauthorized access.
• Send transactional communications (account notifications, billing receipts, security alerts).
• Send service-related communications (product updates, important policy changes).
• Respond to support requests and other inquiries.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.
• Develop new features and improve existing ones — using aggregated, de-identified data wherever possible.

We do not sell your personal information. We do not share your subscriber lists or campaign content with third parties for their own marketing purposes.

4. How we share information

We share information only in the following circumstances:

• Service providers. We work with third-party vendors who perform services on our behalf — hosting, payment processing, error logging, analytics, and customer support tooling. These vendors have access to information only to the extent needed to perform their work, and are contractually bound to protect it.
• Sending and verification providers you connect. When you connect a sending provider (Amazon SES, SendGrid, Mailgun, etc.) or verification provider (ZeroBounce, Kickbox, etc.), CleverlyBox transmits the data necessary for that service to function — recipient lists, message content, verification queries. You control which providers are connected.
• Legal requirements. We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others; investigate fraud; or respond to a government request.
• Business transfers. If CleverlyBox is involved in a merger, acquisition, or sale of all or part of its assets, your information may be transferred as part of that transaction. We will notify you and provide opt-out options where applicable.
• With your consent. We will share information with third parties when you explicitly direct us to do so (for example, by enabling an integration).

5. Cookies and tracking technologies

We use cookies, local storage, and similar technologies to operate the Service, remember your preferences, authenticate sessions, analyze usage, and detect fraud. You can control cookies through your browser settings; disabling cookies may impact some Service functionality (for example, you may need to log in more frequently).

The categories of cookies we use are:

• Strictly necessary cookies — required for authentication and core Service functions; cannot be disabled.
• Functional cookies — remember preferences such as theme, language, and dashboard settings.
• Analytics cookies — help us understand how the Service is used and where to improve.
• Security cookies — detect unusual login patterns and protect against unauthorized access.

6. Data retention

We retain personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account information is retained until you delete your account.
• Subscriber lists and campaign content are retained while your account is active; you can delete them at any time from within the dashboard.
• Billing records are retained for up to 7 years to satisfy tax and accounting requirements.
• Log data is retained for up to 12 months for security and operational purposes.
• Anonymized or aggregated data may be retained indefinitely.

7. Your rights (GDPR, CCPA, and other privacy laws)

Depending on where you live, you may have rights including:

• Right to access — request a copy of the personal information we hold about you.
• Right to correction — ask us to fix inaccurate information.
• Right to deletion ("right to be forgotten") — request that we delete your personal information.
• Right to portability — receive your information in a structured, machine-readable format.
• Right to restrict or object — limit how we process your information.
• Right to withdraw consent — where processing is based on consent.
• Right to non-discrimination — exercise these rights without facing penalty in service or pricing (CCPA).
• Right to lodge a complaint — with your local data protection authority.

To exercise any of these rights, email us at [email protected]. We respond within 30 days. We may need to verify your identity before fulfilling certain requests.

For our Service users acting as data controllers: when you use CleverlyBox to send to your own subscriber list, you are the data controller for those subscribers, and CleverlyBox is the data processor. We provide tools (export, delete, anonymize) to help you fulfill your subscribers' rights requests.

8. Children's privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact [email protected] and we will take steps to delete it.

9. International data transfers

CleverlyBox is operated from India. If you are accessing the Service from outside India, your information may be transferred to, stored, and processed in countries other than your own — including India, the United States, and other regions where our service providers operate. By using the Service, you consent to such transfers.

Where required, we use Standard Contractual Clauses (SCCs) and other approved transfer mechanisms to provide adequate protection for personal data transferred from the European Economic Area, United Kingdom, and Switzerland.

10. Security

We use industry-standard technical and organizational measures to protect personal information, including encryption in transit (TLS) and at rest, access controls, audit logging, and regular security reviews. No method of transmission or storage is perfectly secure, however, and we cannot guarantee absolute security. If you become aware of a security incident affecting your account, please notify us immediately at [email protected].

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. For material changes, we will notify you by email and/or by prominent notice on the Service before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the revised Policy.

12. Contact us

For questions, requests, or complaints regarding this Privacy Policy or our handling of your information, contact us at:

---

Questions about this policy? Email [email protected] — a person reads every message.