Security Policy

At PrimeInbox, safeguarding our customers' information is one of our highest priorities. We are committed to implementing appropriate technical, administrative, and organizational measures to help protect customer data, maintain platform reliability, and ensure secure access to our services.

This Security Policy outlines the security practices followed by PrimeInbox to protect our platform and customer information.

1. Our Commitment

PrimeInbox is committed to:

• Protecting customer information from unauthorized access.
• Maintaining the confidentiality of business data.
• Securing communication between users and our platform.
• Continuously improving our security practices.
• Monitoring and responding to security threats.

2. Secure Infrastructure

PrimeInbox operates on modern cloud infrastructure designed to provide:

• High availability
• Reliable performance
• Secure networking
• Infrastructure monitoring
• Regular software updates
• System redundancy where applicable

Our infrastructure is maintained with security best practices to help reduce operational risks.

3. Secure Communication

All communication between users and PrimeInbox is protected using HTTPS (SSL/TLS) encryption. Encrypted communication helps safeguard sensitive information exchanged between users and our servers from interception or unauthorized access.

4. Account Security

PrimeInbox implements multiple layers of account protection, including:

• Secure user authentication
• Encrypted password storage
• Session management
• Role-based access controls
• Login verification mechanisms
• Automatic session expiration where applicable

Users are responsible for maintaining the confidentiality of their login credentials.

5. Password Protection

User passwords are never stored in plain text. Passwords are securely hashed before being stored in our systems. We recommend users:

• Create strong, unique passwords.
• Avoid sharing passwords.
• Change passwords periodically.
• Report suspected unauthorized access immediately.

6. Data Protection

PrimeInbox uses reasonable technical and organizational safeguards to help protect customer information, including:

• Access controls
• Secure databases
• Encrypted communications
• Application-level security measures
• Routine software updates
• Security monitoring

Access to customer information is restricted to authorized personnel who require it for operational purposes.

7. Payment Security

PrimeInbox does not store or process sensitive payment credentials such as:

• Credit Card Numbers
• Debit Card Numbers
• CVV
• UPI PIN
• Internet Banking Credentials

Payments are processed securely through trusted third-party payment gateway providers.

PrimeInbox may retain payment-related records such as transaction IDs, invoices, subscription status, and billing history for operational and legal purposes.

8. AI Features & Customer Content

PrimeInbox offers AI-assisted features for generating email content and campaign suggestions. Customer-generated content, lead data, uploaded files, and campaign information remain under the customer's control. AI-generated content is intended to assist users and should always be reviewed before being used in live campaigns.

9. Email & SMTP Security

PrimeInbox allows customers to connect third-party SMTP providers. Users are responsible for:

• Protecting SMTP credentials.
• Maintaining secure SMTP configurations.
• Configuring SPF, DKIM, and DMARC records where appropriate.
• Managing email-sending permissions.

PrimeInbox does not access or disclose SMTP credentials except as necessary to provide the requested functionality.

10. File Security

PrimeInbox allows users to upload files such as:

• CSV Lead Lists
• Images
• Logos
• Email Attachments
• Documents

Uploaded files are stored securely for use within the platform and are accessible only to authorized users within the respective account or workspace.

11. Access Control

PrimeInbox supports role-based access controls to help organizations manage user permissions effectively. Depending on assigned roles, users may be granted access to:

• Campaign Management
• CRM & Leads
• Templates
• Analytics
• Billing
• Team Management
• Administrative Settings

This helps ensure users only access information relevant to their responsibilities.

12. Monitoring & Maintenance

To maintain a secure and reliable platform, we perform ongoing monitoring of:

• Platform availability
• Performance metrics
• Application errors
• Infrastructure health
• Security events

Regular maintenance and updates are carried out to improve security, stability, and performance.

13. Data Backup & Recovery

PrimeInbox performs regular backup procedures designed to support business continuity and assist in recovering data in the event of unforeseen incidents. Backup and recovery processes are reviewed periodically to maintain operational resilience.

14. Third-Party Services

PrimeInbox integrates with trusted third-party providers for services such as:

• Payment Processing
• SMTP & Email Delivery
• Cloud Hosting
• Artificial Intelligence Services
• Analytics
• Customer Support Tools

Each third-party provider maintains its own security policies and practices.

15. Security Incident Response

If a security incident affecting PrimeInbox is identified, we will take appropriate steps to:

• Investigate the issue.
• Contain and mitigate the impact.
• Restore affected services where applicable.
• Notify affected users when required by applicable law.
• Implement corrective measures to help prevent similar incidents.

16. User Responsibilities

Users play an important role in maintaining account security. Users should:

• Keep passwords confidential.
• Use strong authentication credentials.
• Keep browsers and operating systems updated.
• Secure devices used to access PrimeInbox.
• Avoid sharing account credentials.
• Notify PrimeInbox immediately if suspicious activity is detected.

17. Platform Availability

PrimeInbox is designed to provide reliable access to services; however, temporary interruptions may occur due to:

• Scheduled maintenance
• Security updates
• Infrastructure upgrades
• Network issues
• Third-party service outages
• Circumstances beyond our reasonable control

We work to minimize downtime and restore services as quickly as possible.

18. Reporting Security Issues

If you believe you have discovered a security vulnerability or suspicious activity related to PrimeInbox, please contact us promptly. Please include:

• Description of the issue
• Steps to reproduce (if applicable)
• Supporting screenshots or logs
• Contact details for follow-up

We appreciate responsible disclosure and will investigate all legitimate security reports.

19. Policy Updates

PrimeInbox may update this Security Policy periodically to reflect improvements in our security practices, operational changes, or legal requirements. The latest version will always be published on this page with the revised effective date.

20. Contact Us

For security-related questions or to report a potential security issue, please contact:

• PrimeInbox Security Team
• Website: https://primeinbox.online
• Email: contact.primeinbox@gmail.com
• Business Hours: Monday – Saturday, 9:00 AM – 6:00 PM (IST)