GDPR & CCPA Compliance Statement

Our commitment to global privacy regulations

Last updated: Aug 30, 2025

At Inbox2Sheet, we are committed to protecting personal data and complying with global privacy regulations, including:

GDPR

EU/EEA

UK GDPR

United Kingdom

CCPA/CPRA

California, USA

This statement explains how we align with these regulations. For full details, see our Privacy Policy, DPA, and Privacy & Legal Center.

Why This Matters: This statement demonstrates our active compliance with global privacy regulations and commitment to data protection.

πŸ‡ͺπŸ‡Ί GDPR & UK GDPR (EU/UK Customers)

Controller / Processor Roles

  • β€’ You (the customer) are the Controller of the data you forward.
  • β€’ Inbox2Sheet (Bobook Limited) is the Processor, acting only on your instructions.

Legal Basis for Processing

We process personal data under contract (providing the service) and legitimate interests (security, billing, fraud prevention).

Data Subject Rights

You and your customers have the right to access, correct, delete, restrict, or export personal data.

Submit Requests: Use our DSAR form for all data subject rights.

Data Transfers

EU-first routing for email ingestion (Mailgun EU region).
SCCs, UK IDTA, and/or EU-US Data Privacy Framework (DPF) for transfers outside the EEA/UK.
OpenAI API requests can be processed in the EU region with zero retention for eligible projects.

Retention

Raw emails ≀30 days, logs ≀30 days, backups ≀90 days, with configurable mailbox retention (0/1/7/30/90 days).

Supervisory Authority

Our lead authority is the Irish Data Protection Commission (DPC).

πŸ‡ΊπŸ‡Έ CCPA / CPRA (California Customers)

Consumer Rights

California residents have the right to:

Know what personal information we collect and process.
Access, correct, and delete their data.
Opt-out of the "sale" or "sharing" of personal data.

"Do Not Sell" Statement

Inbox2Sheet does not sell personal information. We use trusted subprocessors only to deliver our service.

Exercising Rights

Requests may be submitted via our DSAR form or privacy@inbox2sheet.com.

Verification

We may request additional details to confirm identity before fulfilling requests.

🌍 Other Jurisdictions

Inbox2Sheet will comply with other local privacy laws to the extent applicable, including:

LGPD

Brazil

PIPEDA

Canada

Others

As applicable

πŸ“§ Contact

For GDPR/CCPA questions, contact: privacy@inbox2sheet.com

Or write to:
Bobook Limited
Venture Hub, 136 Capel Street
Dublin 1, D01 T2C9, Ireland