Privacy Policy

Last updated: 13 October 2026

Unified Inbox ("the Service", "the app") is operated by Aventus Informatics ("we", "us"). It is a customer-messaging app for businesses: it connects your Instagram, Facebook Messenger, Gmail and Telegram accounts and shows their conversations in one inbox, so you can read, search and reply in one place. This policy explains what data the Service handles, why, and the choices you have. It applies to the website at unified-inbox.aventusdemo.com and to the inbox when it is shown inside another company's website.

1. Information we handle

• Account details. Your name and email address, either from the company website that signs you in to the inbox, or as entered by the installation administrator. A session cookie keeps you signed in.
• Data from channels you connect, only for accounts you choose to connect:
  • Gmail (Google user data): your Google account email address; email messages in your mailbox, including sender, recipients, subject, body, date, labels and attachments; and the sign-in tokens Google issues to us.
  • Instagram and Facebook Messenger: your account or Page name and ID, the messages sent to it, and the names and IDs of the people who message you.
  • Telegram: one-to-one chats and contact names from your account, and the session needed to stay connected.
• Technical data. Basic server logs (such as time, request path and error messages) used to run and secure the Service.

2. How we use it

We use this information only to provide the features you ask for: to show your conversations in the inbox, keep them up to date, let you search them, apply your own actions (such as archive, star and mark as read), and send the messages you write. We also use it to keep the Service secure and to fix problems. We do not sell your data, we do not use it for advertising, and we do not use it to train artificial-intelligence or machine-learning models.

3. Google user data

If you connect Gmail, we ask Google for these permissions (scopes):

• openid and email: to identify which Google account you connected.
• https://www.googleapis.com/auth/gmail.modify: to read your messages, labels and attachments so they can be shown and searched, and to change labels when you archive, star or mark a message read or unread. We do not delete mail from your Gmail account.
• https://www.googleapis.com/auth/gmail.send: to send replies, forwards and new emails that you write and choose to send.

When you first connect, we import about the last 7 days of mail, then keep your inbox up to date as new mail arrives. We use Google user data only to provide and improve these user-facing features inside the app. We do not transfer it to others except as needed to provide the features, to comply with the law, or as part of a merger or sale with your notice. We do not allow people to read your mail unless you ask us to help with support and give consent, it is needed for security or to follow the law, or the data is aggregated and anonymised for internal operations.

Limited Use. Unified Inbox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Sharing

We do not sell or rent your data. We share data only:

• with the infrastructure providers that host the Service (servers and database), who process it for us under confidentiality;
• with Google, Meta (Instagram and Facebook) and Telegram, as needed to carry out your actions, such as fetching your messages or sending a reply;
• with the company whose website shows the inbox to you (the "host"), only so that it can sign you in; it cannot read your connected conversations through us;
• when the law requires it.

5. Storage and security

Conversations are stored in a PostgreSQL database. The tokens that give the Service access to your accounts (Google, Meta and Telegram) are encrypted at rest with AES-256-GCM, and connections to the Service use HTTPS. Each user can reach only their own connected accounts and conversations; other users cannot see them. Access to our administration tools is limited to authorised staff with separate sign-ins.

6. Retention and deletion

• We keep your data while your account is connected.
• Disconnect: when you disconnect an account in the app, we delete its stored conversations, messages, attachments and tokens, and for Gmail we revoke our access at Google.
• Revoke at the provider: you can also remove our access at any time in your Google account permissions, in Instagram or Facebook settings, or from Telegram's active-devices list. After that we can no longer read new data.
• Request deletion: email us at the address below to delete everything we hold about you. We reply within 30 days. If your access was provided by a company, that company can also ask us to remove its users.

7. Cookies

We use one strictly necessary session cookie to keep you signed in, and a browser setting to remember your theme. We do not use advertising or tracking cookies.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to or restrict how it is used. Contact us to exercise these rights.

9. Children

The Service is not intended for anyone under 16, and we do not knowingly collect their data.

10. Changes to this policy

If we make material changes we will post them on this page and update the date above. Where the law requires, we will also ask for your consent again.

11. Contact

Aventus Informatics, CONTACT_EMAIL.