Trust
Your forms send us your visitors' messages. This page says where they are kept, what reads them, how long they stay and how to delete them, each with a link to where it is written in full.
Reactll
apsyko
Syntask
The application, the database and the stored messages run on one set of servers at DigitalOcean in Frankfurt, Germany. Mail reaches us through Sevk, in the European Union. Every company that touches your data is listed, with what it does and where.
When our rules cannot decide about a message, its text is sent to a language model at OpenAI, in the United States, to judge it. That switch is per workspace and it is yours: turned off, the rules keep judging every message and no message text leaves our servers.
Messages are kept 30 days unless you choose less, up to 90 if you choose more, and then the content is purged. What stays is a record of which rules fired and why — no message, no name, no address.
Export everything whenever you like. Erase one sender's messages when they ask. Close a workspace, with thirty days to change your mind. Or delete your account, which deletes every workspace only you are in, at once — from Settings, without writing to anybody.
Encrypted in transit and on disk. Every query is scoped to one workspace at the data layer, and one that arrives without that scope fails rather than reading another account. Access is logged. We hold no SOC 2 or ISO 27001 certification, and we say so.
Visits to this site are counted without cookies and without storing an IP address. Google Analytics loads only if you accept it. Nothing is tracked inside the application.
If a part of the service fails, a message is delivered rather than lost. Mail that arrives during an outage is held by the mail provider and judged when we are back. Every component is measured every minute, in public.
Humainbox is built in Amsterdam · Istanbul by Reaktör Teknoloji Tic. Ltd. Şti., registered in Türkiye, so both the GDPR and Türkiye's KVKK apply to what we do. A data processing agreement is available on request.
Security reviews, a data processing agreement, where exactly something runs: ask, and a person answers within a working day.
We would like to use Google Analytics and recognise this browser when you come back, which sets cookies. Decline and neither happens, and nothing is sent to Google. What these are.