This policy explains how Better Results Consulting Pte. Ltd. (“we”, “us”) collects, uses, shares and protects personal data when you visit inabox.tools or use the In a Box tools, such as Advertising In a Box (together, the “Services”).
We are a company registered in Singapore and follow Singapore’s Personal Data Protection Act 2012 (PDPA). Where the EU or UK General Data Protection Regulation (GDPR) applies to you, we follow it as well, and we are the controller of your personal data.
Who we are and how to reach us
Better Results Consulting Pte. Ltd. (UEN 202540373E)160 Robinson Road, #14-04 Singapore Business Federation Center, Singapore 068914
Data Protection Officer: security@betterresults.tech
What we collect
When you visit inabox.tools
- Contact form: your name, your email address and your message.
- Server logs: your IP address, browser type, the pages you request and the time of each request. We use these to keep the site running and secure.
- No tracking: this website sets no cookies and uses no analytics or advertising trackers.
When you use the In a Box tools
- Account details: your name, your email address and your password. Passwords are stored only in a one-way hashed form, so nobody, including us, can read them. If you turn on two-step verification, we also keep the settings it needs.
- Signing in with another provider: if you sign in with Google, Microsoft, LinkedIn or Meta (Facebook), that provider sends us your name, your email address and an account identifier. We never see your password for that provider.
- Your business content: for example your company and brand details, logos, fonts, product names, prices and photos, briefs, your conversations with the AI assistant, and the ads and campaigns you create.
- Connected platforms: when you connect an advertising or social account to publish or measure your ads and posts, we store the access that the platform grants us. Examples are a Google Ads account, a Facebook Page or an Instagram professional account. We also store what we publish for you and the results the platform reports back, such as reach and engagement.
- Technical data: the cookies needed to keep you signed in, request logs, and error reports. We remove personal data from error reports before they are sent.
How we use it
We use personal data to:
- provide, operate and support the Services, including generating content with AI at your request;
- publish ads or posts to the platforms you connect, only when you ask us to, and show you their results;
- keep the Services and your account secure, and prevent fraud and abuse;
- reply to your messages and tell you about important changes to the Services;
- meet our legal obligations.
We do not sell your personal data, and we do not use it to target advertising at you.
Where the GDPR applies, we rely on these legal bases:
- performing our contract with you: providing the Services you signed up for;
- our legitimate interests: security, and improving and supporting the Services;
- your consent: for example, when you connect a social account (you can withdraw consent at any time);
- legal obligations.
Who we share it with
We share personal data only with the service providers who help us run the Services, and only as much as each needs:
| Provider | What for |
|---|---|
| Alibaba Cloud (DashScope / Qwen, international service), Google (Gemini) and Anthropic (Claude) | AI features. They receive only what a step needs, such as your brief, your chat messages, your brand details and the images being worked on. |
| Sentry | Error reports, with personal data removed |
| Our email provider | Sending service emails and delivering contact-form messages |
| DigitalOcean | Hosting this website |
| Google, Microsoft, LinkedIn and Meta | Signing in, and publishing to the accounts you connect. Their own privacy policies also apply. |
We may also disclose personal data:
- when the law requires it;
- to protect our rights, our users or the public;
- to a buyer or successor if our business is reorganised or sold. In that case it remains protected by this policy.
International transfers
Some of these providers process data outside Singapore, for example in the United States or the European Union. When we transfer personal data abroad, we make sure it gets protection comparable to the PDPA’s. We do this through the provider’s contractual commitments and, where the GDPR applies, the standard contractual clauses.
How long we keep it
| Data | How long we keep it |
|---|---|
| Account data and business content | While your account is open. When you ask us to delete it, we delete it within 30 days. |
| Copies in our backups | Overwritten within a further 14 days |
| Conversations with the AI assistant | Deleted automatically after 90 days |
| Contact-form messages | As long as we need them to deal with your enquiry |
| Server logs | Up to 90 days |
| Records the law requires us to keep, such as invoices | For the period the law sets |
See Data deletion for how to ask us to delete your data.
Your rights
Under the PDPA, you can:
- ask for access to your personal data;
- ask us to correct it;
- withdraw your consent to our using it.
Where the GDPR applies, you can also:
- ask us to erase your data;
- ask us to restrict how we use it;
- ask for a copy of it in a portable form;
- object to our using it.
To use any of these rights, email security@betterresults.tech. We may need to confirm your identity first, and we reply within 30 days.
If you are not satisfied with our reply, you can complain:
- in Singapore, to the Personal Data Protection Commission (PDPC);
- in the EU or UK, to your local data protection authority.
Security
We protect personal data with encryption in transit (HTTPS), hashed passwords, optional two-step verification, access controls that keep each customer’s data separate, and encrypted off-site backups. No system is perfectly secure. If a data breach is likely to harm you, we will tell you and the authorities as the law requires.
Children
The Services are for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If a change is significant, we will tell account holders by email or in the app before it takes effect.