Privacy Policy
Last updated: 21 October 2026
SocialBox is a shared inbox that lets businesses read and reply to messages and comments from their Facebook Page, Instagram professional account and Threads profile. This policy explains what data we handle and why. SocialBox is operated by SocialBox.
Data we collect
- Account data: the name, email address and password (stored as a secure hash) of each business user, and the business name.
- Connected account data: when a business connects Facebook, Instagram or Threads, we receive access tokens and basic profile information (name, username, picture) for the Pages and accounts they choose. Tokens are stored encrypted.
- Message data: messages, comments, Live comments, replies and mentions that people send to a connected business, including the sender's name, username, profile picture and attachments, plus the business's replies.
- Billing data: subscription status and payment references from our payment provider (Razorpay). We never see or store card or bank details.
How we use it
Only to provide the service: showing conversations to the business's team, sending the replies they write or the automatic replies they set up, assigning conversations to team members, and producing reports for that business. We do not sell data, use it for advertising, or share it with other businesses.
Meta platform data
Data received from Meta (Facebook, Instagram, Threads) is used only for the purposes above and in line with Meta's Platform Terms. A business can disconnect a channel at any time, which stops new data arriving. People who messaged a business can ask us to delete their data — see Data deletion.
Sharing
We use service providers to run SocialBox: our web hosting provider, Meta's APIs (to send and receive messages) and Razorpay (for payments). They process data only on our instructions.
Retention
Conversation data is kept while the business's account is active. When an account is closed, its data is deleted within 30 days. Technical logs are kept for up to 7 days.
Security
Data is sent over HTTPS, access tokens are encrypted at rest, and each business can only access its own workspace.
Your rights
You can ask to access, correct or delete your personal data by writing to admin@indiansilkhouseagencies.com.
Contact
SocialBox · admin@indiansilkhouseagencies.com