Privacy policy — Databox

Cited by

Facts read from this source

• Entity Report an error

  “The “Company”, “Databox”, “us”, “we” or “our” refers to Databox Inc., the owner and sponsor of the website and web applications, is a company incorporated in the State of California, USA.”

• Policy revision date Report an error

  “Last revised on October 26, 2026, effective as of October 26, 2026”

• Collected registration Report an error

  “When you register, you will be asked to provide some limited personal data: your name, company affiliation and company email address. Also required is a unique password to access your account.”

• Google signup Report an error

  “You can also register and create an account through Google. Personal data you have provided to Google will be made available to us to set up your account.”

• No sensitive categories Report an error

  “We do not collect “sensitive” or “special” categories of personal data.”

• Automatic collection Report an error

  “Collected information may specifically include: (1) the browser types and versions used, (2) the operating system used by your device, (3) the website from which access our website (so-called referrers), (4) the sub-websites, (5) the date and time (so-called timestamp) of access to the Internet site, and (6) the Internet protocol address (IP address) associated with your device.”

• Newsletter tracking pixel Report an error

  “The Databox newsletter, which is distributed via email, contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such emails, which are sent in HTML format to enable log file recording and analysis.”

• Newsletter opt out Report an error

  “You can elect to opt out of receiving our online newsletter at any time by clicking on the “Unsubscribe” link at the bottom of our emails or by contacting us directly at compliance@databox.com.”

• No google API data advertising Report an error

  “This never includes data received from Google APIs through connected Google accounts.”

• Outside contractors Report an error

  “such as hosting, customer service, credit card processing and fraud screening, mailing list hosting, and AI service providers that power AI features of our services.”

• No sale Report an error

  “Databox does not rent or sell your personal data to others.”

• Google user data policy Report an error

  “Databox’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.”

• Google account disconnect Report an error

  “You can disconnect your Google account at any time, after which the data is deleted in accordance with our retention periods.”

• No AI training on google data Report an error

  “Neither Databox nor these providers use Google user data, whether raw, aggregated or derived, to train or improve generalized AI/ML models.”

• CCPA rights Report an error

  “The California Consumer Privacy Act (as amended by the California Privacy Rights Act) (together, the CCPA) gives California consumers enhanced rights with respect to their personal data that is collected by covered businesses.”

• CCPA no sale or share Report an error

  “We do not “sell” or “share” your personal data to third parties for any purpose.”

• CCPA response timeline Report an error

  “We will confirm receipt of your request within 10 business days. We must provide the requested information or delete or correct your personal data within 45 days of receipt of your request, but we can use up to an additional 45 days if we let you know that additional time is needed.”

• Do not track Report an error

  “Please note that we do not alter our website’s data collection and use practices when we receive a Do Not Track signal from your browser.”

• Location Report an error

  “Databox and our website and web applications are located and hosted in the United States and governed by US law.”

• US adequacy status Report an error

  “The United States has not sought or received a finding of “adequacy” from the European Union under Article 45 of the General Data Protection Regulation (“GDPR”).”

• Eea UK safeguards Report an error

  “we will ensure that such personal data is safeguarded through appropriate contractual terms or other approved mechanisms.”

• GDPR complaint right Report an error

  “You may also have the right to make a GDPR complaint to the relevant Supervisory Authority.”

• Security measures Report an error

  “We use standard, industry-wide, commercially reasonable security practices such as encryption, firewalls and SSL (Secure Socket Layers – 256 bit) for protecting your information.”

• Security page Report an error

  “A detailed overview of our security measures is available on our Security and Compliance page.”

• Retention Report an error

  “We will keep your personal data in active files or systems as long as needed to meet the purposes for which it was collected, to provide the services or products you requested, or as otherwise may be required by law.”

• Children under 16 Report an error

  “children under 16 are not allowed to register with our website or to participate in public posting areas on our website.”

• Child data deletion SLA Report an error

  “If we discover that we have collected personal data from a child under the age of 16 without parental consent, Databox will delete that information as soon as possible, but no later than in 30 days.”

• User content confidentiality Report an error

  “Your user content is kept private in your network. Databox does not monitor the user content you post on the website. We do not have administrative tools to view our users’ messages”

• Privacy contact Report an error

  “By email: compliance@databox.com”

• Postal address Report an error

  “Databox Inc. 6 Liberty Square PMB #471 Boston, MA 02109 USA”

• Policy change notice Report an error

  “we will not make changes that result in significant additional uses or disclosures of your personal data without notifying you of such changes via email at least 14 days before such changes would apply.”

• Breach notification Report an error

  “In the event that personal data is compromised as a result of a breach of security, Databox will promptly notify those persons whose personal data has been compromised, in accordance with the Notification Procedures set forth in this Privacy Policy, or as otherwise required by applicable law.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Data Analyst European sovereignty
• The Finance Controller European sovereignty
• The IT Administrator European sovereignty
• The Managing Director European sovereignty
• The SaaS Product Lead European sovereignty
• The Skeptic European sovereignty