Privacy Policy

Introduction

At Flashbox ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our business intelligence platform and services.

By using Flashbox, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

• Email address
• Name and company name
• Account credentials (encrypted)
• Payment information (when paid services become available, processed securely through payment providers)

Integration Data

• API credentials for connected services (encrypted)
• Data from your connected sources (Google Ads, Analytics, databases, etc.)
• OAuth tokens for authorized services
• Custom queries and reports you create

Usage Information

• Log data (IP address, browser type, pages visited)
• Feature usage and interaction patterns
• Performance metrics and error reports

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process and complete transactions
• Send you technical notices and support messages
• Respond to your comments and questions
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues
• Protect against fraudulent or illegal activity

Data Security

We implement strong security measures to protect your information:

• Encryption: All sensitive data is encrypted at rest using AES-256 encryption
• Secure Transmission: All data transmissions use TLS/SSL protocols
• Access Controls: Strict access controls and authentication requirements
• Isolation: Workspace-level data isolation ensures your data is separated from other users
• Regular Audits: Security audits and monitoring for potential vulnerabilities
• OAuth 2.0: Industry-standard authentication for third-party services

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following situations:

• With your consent: When you explicitly agree to share information
• Service providers: With trusted third-party services that help us operate our platform (hosting, analytics, and when applicable, payment processing)
• Legal requirements: When required by law or to respond to legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets
• Protection: To protect the rights, property, or safety of Flashbox, our users, or the public

Third-Party Services

Our platform integrates with third-party services. When you connect these services:

• You authorize us to access your data from these services
• We store only the data necessary for providing our services
• We use OAuth 2.0 when available for secure authentication
• Each service's own privacy policy applies to their data collection

Data Retention

We retain your information for as long as your account is active or as needed to provide services. You can request deletion of your data at any time by contacting us. We will retain and use your information only as necessary to comply with legal obligations, resolve disputes, and enforce agreements.

Your Rights

You have the right to:

• Access: Request a copy of the information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable format
• Withdraw consent: Withdraw consent for data processing where applicable
• Opt-out: Opt-out of marketing communications

GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). We process personal data only with lawful basis, including consent, contract fulfillment, legal obligations, and legitimate interests.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information (which we do not do).

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: