Privacy Policy

1. Introduction

EboxSecure, Inc. ("EboxSecure," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy ("Policy") describes how we collect, use, process, disclose, and safeguard your information when you use our secure package delivery services, mobile applications, websites, and related services (collectively, the "Services").

This Policy applies to all users of our Services and is incorporated into our Terms of Service. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree with our practices, please do not use our Services.

We may update this Policy periodically to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page indicates when this Policy was last revised. Your continued use of our Services after any changes constitutes acceptance of those changes.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us, including:

• Account Information: Name, email address, phone number, username, password, and security questions
• Identity Verification: Government-issued ID information, social security number (last 4 digits), date of birth, and other verification documents as required by law
• Address Information: Residential address, business address, delivery addresses, and mailing addresses
• Payment Information: Credit card details, bank account information, billing address, and payment preferences
• Package Information: Package details, sender/recipient information, delivery instructions, and special handling requirements
• Communications: Messages, feedback, support requests, and any other information you provide when contacting us

2.2 Information Automatically Collected

We automatically collect certain information when you use our Services:

• Device Information: IP address, device identifiers, operating system, browser type and version, mobile carrier
• Usage Information: Pages visited, features used, time spent on pages, search queries, clickstream data
• Location Information: GPS coordinates, Wi-Fi access points, cell tower information (with your consent)
• Cookies and Tracking: Session data, preferences, authentication status, and analytics data
• Security Information: Authentication logs, access attempts, security events, and fraud prevention data

2.3 Information from Third Parties

We may collect information about you from third parties, including:

• Identity verification services and background check providers
• Credit reporting agencies and fraud prevention services
• Social media platforms (when you choose to connect your accounts)
• Our business partners and delivery service providers
• Public databases and government records

3. How We Use Your Information

We process your personal information for the following legitimate business purposes:

3.1 Service Provision

• Creating and managing your account and profile
• Processing package delivery and pickup requests
• Facilitating secure storage and handling of packages
• Providing customer support and technical assistance
• Processing payments and managing billing

3.2 Security and Compliance

• Verifying your identity and preventing unauthorized access
• Detecting, preventing, and investigating fraud and security incidents
• Complying with legal obligations and regulatory requirements
• Conducting background checks and risk assessments
• Maintaining records for legal and business purposes

3.3 Business Operations

• Improving and optimizing our Services and user experience
• Conducting analytics and research to enhance our offerings
• Developing new features and services
• Marketing and promotional communications (with your consent)
• Managing business relationships and partnerships

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: To fulfill our contractual obligations under our Terms of Service
• Legitimate Interests: For our legitimate business interests, including security, fraud prevention, and service improvement
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Consent: Where you have provided explicit consent for specific processing activities
• Vital Interests: To protect your vital interests or those of another person

5. Information Sharing and Disclosure

We may share your personal information in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business, including:

• Cloud computing and data storage providers
• Payment processors and financial institutions
• Identity verification and background check services
• Delivery and logistics partners
• Customer support and communication platforms
• Analytics and marketing service providers

5.2 Legal Requirements

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect and defend our rights and property
• Investigate potential violations of our Terms of Service
• Protect the safety and security of our users and the public
• Prevent or investigate possible wrongdoing in connection with our Services

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction, subject to applicable laws and this Policy.

5.4 Consent

We may share your information with your explicit consent or at your direction.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes without your explicit consent.

6. Data Security

We implement comprehensive security measures to protect your personal information, including:

6.1 Technical Safeguards

• End-to-end encryption for data transmission and storage
• Advanced firewall and intrusion detection systems
• Multi-factor authentication and access controls
• Regular security audits and vulnerability assessments
• Secure coding practices and regular software updates

6.2 Physical Safeguards

• Secure data centers with restricted access
• 24/7 monitoring and surveillance systems
• Environmental controls and backup power systems
• Secure destruction of physical media containing personal information

6.3 Administrative Safeguards

• Employee background checks and confidentiality agreements
• Regular privacy and security training
• Incident response and breach notification procedures
• Data minimization and purpose limitation practices

While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any security incidents and notifying affected users as required by law.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. Our retention practices include:

• Account Information: Retained for the duration of your account and up to 7 years after account closure for legal and business purposes
• Transaction Records: Retained for 7 years to comply with financial regulations and tax requirements
• Security Logs: Retained for 3 years for security monitoring and incident investigation
• Marketing Communications: Retained until you unsubscribe or withdraw consent
• Legal Holds: Information subject to legal proceedings may be retained until the matter is resolved

When information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule and applicable laws.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

8.1 General Rights

• Access: Request a copy of your personal information we hold
• Rectification: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of your personal information in certain circumstances
• Restriction: Request limitation of processing in certain situations
• Portability: Request transfer of your information to another service provider
• Objection: Object to processing based on legitimate interests or for direct marketing

8.2 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your rights

8.3 Exercising Your Rights

To exercise your privacy rights, please contact us using the information in Section 12. We may require verification of your identity before processing your request. We will respond to your request within the timeframes required by applicable law.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. When we transfer your information internationally, we implement appropriate safeguards to ensure your information remains protected, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Binding corporate rules and certification schemes
• Other legally recognized transfer mechanisms

10. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience and collect information about your usage patterns. These technologies help us:

• Remember your preferences and settings
• Provide personalized content and features
• Analyze usage patterns and improve our Services
• Detect and prevent fraud and security threats
• Deliver targeted advertisements (with your consent)

You can control cookies through your browser settings and our cookie preferences center. However, disabling certain cookies may limit your ability to use some features of our Services.

11. Children's Privacy

Our Services are not intended for individuals under the age of 18, and we do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18 without parental consent, we will take immediate steps to delete that information. If you believe we have collected information from a child under 18, please contact us immediately.

12. Contact Information and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable laws. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy
• Notify you via email or prominent notice on our website
• For material changes affecting your rights, obtain your consent where required by law
• Maintain previous versions of this Policy for your reference

Your continued use of our Services after any changes constitutes acceptance of the updated Policy. We encourage you to review this Policy regularly to stay informed about how we protect your privacy.

14. Effective Date

This Privacy Policy is effective as of the "Last Updated" date indicated at the top of this page and applies to all information collected by EboxSecure before and after the effective date, subject to applicable laws.