Privacy Policy

Effective Date: October 21, 2026
Replaces the version dated February 5, 2025.

This Privacy Policy explains what information Formula Inbox ("we," "our," "us") collects when you visit formulainbox.com or use our services, why we collect it, who we share it with, and the choices and rights you have. We wrote it in plain language. If anything is unclear, email us at contact@formulainbox.com.

The short version

• We collect what you give us (like your email and domain) and some technical details from your browser.
• We use it to run our free tools, answer you, book calls, deliver our services and improve the site.
• Analytics and advertising tools only load if you click Accept on our cookie banner.
• We do not sell your information for money. We do not ask for sensitive information like health details. We only hold a client’s payment card when they ask us to buy licenses for them.
• You can ask to see, fix or delete your information at any time.

1. Who we are

Formula Inbox is the business name of Current Medium L.L.C., an email deliverability consultancy at 7901 4th Street North, STE 300, St. Petersburg, FL 33702, USA. Current Medium L.L.C. is responsible for (the "controller" of) the personal information described in this policy. You can reach us at contact@formulainbox.com.

This policy covers our website and our marketing and sales activities. When we work on a client’s email systems under a contract, that contract controls how we handle the client’s data, and we act on the client’s instructions.

2. Information we collect

Information you give us

• Deliverability Assessment: your email address, your sending domain, and any email numbers you choose to enter (open, click, bounce, unsubscribe and spam complaint rates). We check your domain’s public DNS records and blocklist status and build a PDF report.
• Inbox Placement Test: your email address and the test email you send from your own mailbox. That test email includes your sender address, the message content and its technical headers.
• Booking a call (Cal.com): your name, email, time zone, the time you pick and any notes you add.
• Chat and callbacks (Context Memo): the messages you type into the chat assistant, and any contact details you give when you ask for a callback.
• Emails and calls: anything you send us when you email or call us.
• Clients: your name, company, job title, contact details and billing details. Payments to us are handled by our payment and invoicing providers.
• Client payment cards for setup work: when we set up email infrastructure for you, we may need to buy licenses and services in your name, like Google Workspace, Microsoft 365, domain names and inbox warm-up tools. If you give us a payment card for this, we store it encrypted in our password manager (1Password), use it only for the purchases you approve, and delete it when the engagement ends.

Information collected automatically

• Always: when you load a page, our host (Vercel) receives standard technical details like your IP address, browser type, device type, the page you asked for and the referring page. This is needed to show you the site and keep it secure. Vercel Web Analytics also counts page views without cookies and without storing your IP address.
• Campaign details: if you arrive from a link with tracking tags (UTM parameters), we save those tags with your form so we know which campaign brought you.
• Only if you click Accept: analytics and advertising tools collect the pages you visit, what you click, how you scroll, your device and browser, approximate location (from your IP address) and cookie IDs. Microsoft Clarity also records how you move through a page (mouse movements, clicks and scrolling) to help us find design problems. Clarity hides what you type into form fields. See Section 4 for the full list.

Visits from bots and AI crawlers

When a request comes from software that calls itself a bot, crawler or AI agent (for example, a search engine or an AI assistant), we send Context Memo the page address, the software’s user agent and an approximate location (country, region, city and time zone) worked out from the IP address. We do not send the IP address itself. This helps us understand how search engines and AI tools read our site. It does not apply to normal browsers.

Information from other sources

We may get information about you from public sources (like your company website or LinkedIn profile), from people who refer you to us, and from the service providers listed in this policy.

3. How we use information, and our legal reasons

Some privacy laws, like the GDPR, require a legal reason (a "lawful basis") for each use. Here is what we do and why.

Our free tools give your domain a score automatically. That score is about your email setup, not about you, and it has no legal or similarly serious effect on you.

4. Cookies and tracking tools

Cookies are small files a website saves in your browser. Similar tools include tags, pixels and browser storage. When you first visit, we show a banner with two buttons:

• Accept: turns on the analytics and advertising tools marked "After Accept" below.
• Deny: keeps them off. The site still works.

We save your choice in a cookie named cookie_consent for one year. To change your choice at any time, click Cookie settings at the bottom of any page. If you switch from Accept to Deny, we remove our analytics cookies and reload the page without those tools.

Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as Deny. Analytics and advertising tools stay off, even if you clicked Accept before.

You can also block or delete cookies in your browser settings, and install the Google Analytics opt-out add-on. If you block all cookies, the booking calendar or chat may not work.

5. Who we share information with

We share information only as described here. Most of these companies are "service providers" (or "processors"). They work for us and may only use the information to provide their service.

• Website hosting and network: Vercel (hosting, Web Analytics, Speed Insights) and Cloudflare (domain name services).
• Free tool providers: MailReach runs the Inbox Placement Test and receives your test email. Blacklist Checker receives your domain name to check blocklists.
• Chat and bot logging: Context Memo runs our chat assistant and call card and receives our bot and AI crawler logs.
• Scheduling: Cal.com.
• Business tools: our automation and customer relationship management (CRM) tools, email provider, password manager (1Password), and payment, invoicing and accounting providers.
• Vendors you ask us to buy from: when we buy licenses or services for a client (like Google Workspace, Microsoft 365, domain registrars or warm-up tools), the vendor receives the client’s payment and account details.
• Analytics and advertising (only after Accept): Google, Microsoft, LinkedIn and OpenAI. LinkedIn and OpenAI may also use this data under their own privacy policies.
• Legal reasons: when the law requires it, to answer valid legal requests, or to protect our rights, our clients or the public.
• Business changes: if we merge, are bought, or sell assets, information may move to the new owner. This policy will still protect it.

You can read how these companies handle data in their own policies: Vercel, Cloudflare, Google, Microsoft, LinkedIn, OpenAI, Context Memo, Cal.com, MailReach and Blacklist Checker.

6. Our AI chat assistant

The chat bar on our site is run by Context Memo. Its answers are written by artificial intelligence (AI), not by a person, and they can be wrong. Please check anything important with us directly.

• Your chat messages, the page you are on and basic technical details go to Context Memo, which uses outside AI providers to write replies.
• We may read chat conversations to improve our answers and follow up on your questions.
• Please do not type passwords, financial details or other sensitive information into the chat.
• The call card shows our phone number and lets you ask for a callback. If you ask for one, we use your details only to call you back.

7. How long we keep information

We keep information only as long as we need it for the reasons in this policy, then delete it or remove anything that identifies you.

• Leads (assessment, placement test, bookings, chat): while we are in touch with you, and deleted when we no longer need it for follow-up or when you ask us to delete it.
• Client records: for as long as we work together, then as long as tax, accounting and legal rules require (usually up to 7 years).
• Client payment cards for setup work: deleted when the engagement ends.
• Rate-limit records (your email and IP address, used to stop abuse of our free tools): a few minutes, in temporary server memory.
• Your cookie choice: 1 year.
• Analytics and advertising data: according to each provider’s settings. Google Analytics keeps event data for no more than 14 months. Microsoft Clarity keeps recordings for about 30 days and heatmap data for about 13 months.
• Hosting logs: a short time, as set by Vercel.

8. How we protect information

We use reasonable safeguards. Our site uses encryption (HTTPS). Secret keys stay on our servers. Client payment cards are stored only in an encrypted password manager. We limit who can see personal information and choose providers with strong security. No system is perfectly secure, so we cannot promise total security. If a data breach affects you, we will tell you and the authorities when the law requires it.

9. International data transfers

We are based in the United States, and most of our providers store data in the United States. If you are outside the U.S., your information will be moved to and handled in the U.S., where privacy laws may differ from yours. When we move personal information out of the European Economic Area, the UK or Switzerland, we rely on legal safeguards: the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) for providers certified under it, or the European Commission’s Standard Contractual Clauses. You can email us for more details.

10. Your privacy rights

Wherever you live, you can ask us to:

• Tell you what information we have about you and give you a copy.
• Fix information that is wrong.
• Delete your information.
• Stop sending you marketing emails. Every marketing email has an unsubscribe link.

To make a request, email contact@formulainbox.com. We will ask you to confirm your identity, usually by replying from the email address we have on file. We will not charge you, unless a request is clearly unfounded or excessive. Some laws let us keep certain information, such as tax records.

11. Extra rights in Europe, the UK and Switzerland (GDPR)

If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to:

• Object to uses based on our legitimate interests, and to direct marketing at any time.
• Restrict how we use your information while a concern is checked.
• Data portability: get the information you gave us in a common, machine-readable format, or have it sent to another company.
• Withdraw consent at any time, for cookies by clicking Cookie settings at the bottom of any page. This does not affect anything we did before you withdrew it.
• Complain to your local data protection authority. In the UK, that is the Information Commissioner’s Office (ICO). We would like the chance to help first, so please contact us.

We answer requests within one month. If a request is complex, we may need up to two more months, and we will tell you why. You do not have to give us personal information, but without your email we cannot send you assessment results or book a call.

12. Extra rights in California and other U.S. states

This section is for residents of California (under the CCPA, as changed by the CPRA) and other states with privacy laws, such as Colorado, Connecticut, Oregon, Texas, Utah and Virginia.

What we collected in the past 12 months

We collect this information from you, your device and our service providers, for the reasons listed in Section 3. We keep it as described in Section 7. The only sensitive personal information we hold is payment card details that clients give us, and we use them only to make the purchases they ask for. We do not use sensitive information to learn about you.

Selling and sharing

We do not sell personal information for money. But if you click Accept, the LinkedIn and OpenAI advertising tags may count as "sharing" for cross-context behavioral advertising under California law, and as "targeted advertising" or a "sale" under some other state laws. You can opt out at any time by clicking Deny on our cookie banner, or by clicking Cookie settings at the bottom of any page and choosing Deny. We also treat a Global Privacy Control signal from your browser as an opt-out. We do not knowingly sell or share the personal information of anyone under 16.

Your rights

• Know and access: what we collect, where it comes from, why we use it, who we share it with, and a copy of it.
• Delete and correct your information.
• Opt out of selling, sharing and targeted advertising.
• Limit the use of sensitive personal information. We do not use it in ways that trigger this right.
• Equal treatment: we will not treat you worse for using your rights.

How to make a request

Email contact@formulainbox.com with your request and the state you live in. We will confirm we got it within 10 business days and answer within 45 days. If we need more time, we will tell you, and we may take up to 45 more days. An authorized agent can make a request for you if they show us your signed permission, and we may still ask you to confirm your identity.

How to appeal

If we say no to your request, you can appeal by replying to our answer or emailing contact@formulainbox.com with the subject line "Privacy Appeal." We will answer within the time your state’s law requires (usually 45 to 60 days). If you are still unhappy, you can contact your state attorney general.

13. Children’s privacy

Our site and services are for businesses. They are not meant for anyone under 16, and we do not knowingly collect information from children. If you think a child gave us information, email us and we will delete it.

14. Links to other websites

Our site links to other websites, like LinkedIn, YouTube, GitHub, Upwork and Udemy. Their own privacy policies apply when you visit them. We are not responsible for how they handle your information.

15. Changes to this policy

We may update this policy when our tools, our services or the law change. We will post the new version here, change the Effective Date at the top and list the main changes. If a change is significant, we will also show a notice on our site or email you if we have your address. Please also read our Terms of Service.

16. Contact us

For questions, requests or complaints about privacy, email contact@formulainbox.com. We usually reply within a few business days.

Current Medium L.L.C. dba Formula Inbox
7901 4th Street North, STE 300
St. Petersburg, FL 33702, USA