Unified Inbox, run by IT Mark (Muhammad Usman Khan Lohani). Last updated 19 October 2026.
Unified Inbox gives businesses one inbox for the messages and comments their customers send them on Facebook, Instagram and WhatsApp, so the business can answer them in one place. This page explains what personal data the service handles, why, who else sees it, how long it is kept and how to have it deleted.
Who this policy is about
- People who message or comment on a business that uses Unified Inbox. For this data the business decides what it is used for; we handle it on the business's behalf and on its instructions.
- People who connect a business's Facebook Page, Instagram account or WhatsApp number to Unified Inbox by logging in with Facebook.
- Business staff who use our dashboard.
What we collect
- From customers, through Facebook, Instagram and WhatsApp: the name and profile picture those platforms share with the business, the identifiers they give you for that business, the messages, comments and attachments you send the business and its replies to you, your phone number if you write on WhatsApp, and when each message was sent.
- From people who connect an account: an identifier Facebook creates for you for our app (not your Facebook profile), and the access the business accounts you approve give us, stored encrypted. We never see your Facebook password.
- From dashboard users: the name and email address you sign in with, a record of when you signed in and from which IP address, the name put on what you do, settings, and what the business uploads, such as product information and images for posts. Sign-in codes are kept only in a form that cannot be turned back into the code.
- Technical records: server logs with dates, times and technical details of requests, used to run and secure the service.
How we use it
- To deliver customers' messages and comments to the business's inbox and send the business's replies back.
- To show the business reports about its own conversations, for example how quickly it replies.
- To keep the connections to Facebook, Instagram and WhatsApp working, and to keep the service secure.
We do not sell personal data, we do not use it for advertising, and we use data received from Facebook, Instagram and WhatsApp only to provide this service to the business that connected the account.
Automated replies
A business can switch on automated replies. When it does, the text of a customer's message, the conversation so far and the business's own product and policy information are sent to an AI model provider, which prepares a reply that the service sends or hands to a person at the business. We only use providers whose terms do not allow them to train their models on this content.
Who else sees it
- Meta (Facebook, Instagram and WhatsApp), to receive and send messages. Meta's own privacy policy applies on its platforms.
- Our hosting provider, which stores the data for us.
- An AI model provider, only for businesses that switch on automated replies.
- The business you wrote to, which sees its own conversations. Each business's conversations are kept apart from every other business's.
- Authorities, when the law requires it.
These providers may process data in countries other than yours, and act only on our instructions.
How long we keep it
- Conversations are kept for 24 months after their last message, or less if the business asks, and are then deleted.
- The access to a connected account is deleted when the account is disconnected, or when the person who connected it asks for their data to be deleted.
- Server logs are kept only as long as needed to run and secure the service.
How we protect it
Connections use HTTPS. Access tokens and secrets are stored encrypted. People sign in with a one-time code sent to their email; there are no passwords to steal. Each person sees only the businesses they were added to, and only the business and the people who run the service for it can see its conversations.
Deleting your data
If you connected a business account with Facebook: in Facebook, go to Settings & privacy → Settings → Business integrations (or Apps and websites), remove Unified Inbox, and choose to send a deletion request. Facebook tells us, we delete the access you gave and the record that you gave it, and Facebook shows you a confirmation code. You can follow your request on our deletion status page with that code.
If you messaged or commented on a business: ask that business, or write to us at [email protected] with the business's name and the platform you wrote on. We delete your messages and comments from our service within 30 days, or tell you why something must be kept, for example because the law requires it. This deletes them from our service only; Facebook, Instagram and WhatsApp have their own tools for what is on their platforms.
You can also ask us, at the same address, what data we hold about you or to correct it.
Children
The service is made for businesses and is not directed at children.
Changes
We update this page when the service changes. The date at the top shows the current version.
Contact
IT Mark (Muhammad Usman Khan Lohani)
[email protected]
House No. 260-C, Street No. 31, Sector G-6/2, Islamabad 44000, Pakistan
Unified Inbox, run by IT Mark (Muhammad Usman Khan Lohani). Last updated 19 October 2026.
Unified Inbox gives businesses one inbox for the messages and comments their customers send them on Facebook, Instagram and WhatsApp, so the business can answer them in one place. This page explains what personal data the service handles, why, who else sees it, how long it is kept and how to have it deleted.
Who this policy is about
- People who message or comment on a business that uses Unified Inbox. For this data the business decides what it is used for; we handle it on the business's behalf and on its instructions.
- People who connect a business's Facebook Page, Instagram account or WhatsApp number to Unified Inbox by logging in with Facebook.
- Business staff who use our dashboard.
What we collect
- From customers, through Facebook, Instagram and WhatsApp: the name and profile picture those platforms share with the business, the identifiers they give you for that business, the messages, comments and attachments you send the business and its replies to you, your phone number if you write on WhatsApp, and when each message was sent.
- From people who connect an account: an identifier Facebook creates for you for our app (not your Facebook profile), and the access the business accounts you approve give us, stored encrypted. We never see your Facebook password.
- From dashboard users: the name and email address you sign in with, a record of when you signed in and from which IP address, the name put on what you do, settings, and what the business uploads, such as product information and images for posts. Sign-in codes are kept only in a form that cannot be turned back into the code.
- Technical records: server logs with dates, times and technical details of requests, used to run and secure the service.
How we use it
- To deliver customers' messages and comments to the business's inbox and send the business's replies back.
- To show the business reports about its own conversations, for example how quickly it replies.
- To keep the connections to Facebook, Instagram and WhatsApp working, and to keep the service secure.
We do not sell personal data, we do not use it for advertising, and we use data received from Facebook, Instagram and WhatsApp only to provide this service to the business that connected the account.
Automated replies
A business can switch on automated replies. When it does, the text of a customer's message, the conversation so far and the business's own product and policy information are sent to an AI model provider, which prepares a reply that the service sends or hands to a person at the business. We only use providers whose terms do not allow them to train their models on this content.
Who else sees it
- Meta (Facebook, Instagram and WhatsApp), to receive and send messages. Meta's own privacy policy applies on its platforms.
- Our hosting provider, which stores the data for us.
- An AI model provider, only for businesses that switch on automated replies.
- The business you wrote to, which sees its own conversations. Each business's conversations are kept apart from every other business's.
- Authorities, when the law requires it.
These providers may process data in countries other than yours, and act only on our instructions.
How long we keep it
- Conversations are kept for 24 months after their last message, or less if the business asks, and are then deleted.
- The access to a connected account is deleted when the account is disconnected, or when the person who connected it asks for their data to be deleted.
- Server logs are kept only as long as needed to run and secure the service.
How we protect it
Connections use HTTPS. Access tokens and secrets are stored encrypted. People sign in with a one-time code sent to their email; there are no passwords to steal. Each person sees only the businesses they were added to, and only the business and the people who run the service for it can see its conversations.
Deleting your data
If you connected a business account with Facebook: in Facebook, go to Settings & privacy → Settings → Business integrations (or Apps and websites), remove Unified Inbox, and choose to send a deletion request. Facebook tells us, we delete the access you gave and the record that you gave it, and Facebook shows you a confirmation code. You can follow your request on our deletion status page with that code.
If you messaged or commented on a business: ask that business, or write to us at [email protected] with the business's name and the platform you wrote on. We delete your messages and comments from our service within 30 days, or tell you why something must be kept, for example because the law requires it. This deletes them from our service only; Facebook, Instagram and WhatsApp have their own tools for what is on their platforms.
You can also ask us, at the same address, what data we hold about you or to correct it.
Children
The service is made for businesses and is not directed at children.
Changes
We update this page when the service changes. The date at the top shows the current version.
Contact
IT Mark (Muhammad Usman Khan Lohani)
[email protected]
House No. 260-C, Street No. 31, Sector G-6/2, Islamabad 44000, Pakistan