ARN Infotech LLC, operating as Digital Mail Box ("DMB", "we", "us", or "our"), operates the digital mail platform at digitalmailbox.io. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.
The short version: We collect the minimum information needed to deliver your digital mail. We never sell your personal data, and we never share your information between the businesses that send you messages on DMB.
When you register, we collect:
When a business sends you a message through DMB, we store the subject line, body content, and the AI-generated summary, category, and action items for that message. This content appears in your inbox and is visible only to you (and household members on a Family plan).
We log when you open a message, archive it, or star it. This information is used to give businesses open and click statistics for their campaigns, and to power your personal savings dashboard.
When we send a verification postcard, we store a one-way hash of the 6-digit code. The plaintext code is never retained after the postcard is sent.
We collect your IP address, browser user-agent string, and push notification tokens (for mobile notifications) to operate the service securely and deliver notifications to your devices.
We do not sell, rent, or trade your personal information to any third party.
DMB operates as a communication carrier, not a data broker. When Chase Bank sends you a statement through DMB, Chase never learns that your insurance company also sends you mail on DMB, and vice versa. Each business only knows that it sent a message — not anything about your other senders.
We share data with trusted service providers who process it on our behalf under written data processing agreements:
These providers are contractually prohibited from using your data for their own purposes.
We may disclose information where required by law, court order, or government authority, or to protect the rights, property, or safety of DMB, our users, or the public.
You can block any sender from your inbox at any time. Blocked senders cannot deliver messages to your address. You can manage your block list in the inbox settings.
You can view and download the personal information associated with your account by contacting us at privacy@digitalmailbox.io.
You can update your name, language preference, and notification settings from your profile page. To change your registered address, use the address change flow in the app (a new verification postcard will be sent).
You can request deletion of your account and all associated personal data by contacting us. We will complete verified deletion requests within 30 days. Note that some information may be retained in audit logs where required by law (see Data Retention below).
You can block any individual business sender at any time from your inbox. You cannot opt out of service notifications (e.g., password reset emails, verification postcards) as these are necessary to operate the service.
California residents have the right to know what personal information we collect and how it is used, request deletion of their personal information, opt out of the "sale" or "sharing" of personal information (we do neither), and not be discriminated against for exercising these rights. To exercise any of these rights, contact us at privacy@digitalmailbox.io or write to us at the address below.
If you are located in the European Economic Area, UK, or Switzerland, you have rights of access, rectification, erasure, restriction, portability, and objection. You may also lodge a complaint with your local supervisory authority. Our legal basis for processing your data is: contract performance (operating the service), legitimate interest (security and fraud prevention), and consent (marketing communications, which you can withdraw at any time by blocking senders).
We protect your personal information using:
No security system is perfect. If you believe your account has been compromised, please contact us immediately at security@digitalmailbox.io.
DMB uses browser local storage (not cookies) to keep you signed in between sessions. We do not use third-party analytics cookies, advertising pixels, or tracking scripts. The only data stored in your browser is your session token and display preferences (e.g., inbox sort order).
DMB is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has registered on our platform, please contact us and we will promptly delete the account.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an in-app notification or email. Your continued use of DMB after a change becomes effective constitutes your acceptance of the revised policy.
If you have questions, requests, or concerns about this Privacy Policy or how we handle your data:
Digital Mail Box — Privacy Team
Email: privacy@digitalmailbox.io
Security: security@digitalmailbox.io
We aim to respond to all privacy requests within 5 business days and to complete verified data deletion requests within 30 days.