Privacy Policy

1. Introduction

Welcome to OneBox ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media management platform.

2. Information We Collect

We collect several types of information to provide and improve our services:

2.1 Account Information

• Name and email address
• Password (encrypted)
• Profile information
• Team and organization details

2.2 Social Media Account Data

• Access tokens for connected platforms (Facebook, Instagram, Twitter, LinkedIn, WhatsApp)
• Messages, comments, and direct messages from your connected accounts
• Profile information from connected platforms
• Post content and metadata

2.3 Usage Information

• Log data (IP address, browser type, device information)
• Usage patterns and feature interactions
• Performance data and error logs

3. How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining our services
• Synchronizing messages from your social media accounts
• Enabling you to respond to messages and comments
• Improving our platform and developing new features
• Sending service-related notifications and updates
• Analyzing usage patterns to enhance user experience
• Ensuring platform security and preventing fraud

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using SSL/TLS protocols
• Passwords are securely hashed using bcrypt
• Access tokens are encrypted and stored securely
• Regular security audits and vulnerability assessments
• Limited employee access to user data on a need-to-know basis

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With your consent: When you explicitly authorize us to share information
• Service providers: Third-party services that help us operate (hosting, analytics)
• Legal requirements: When required by law or to protect our rights
• Business transfers: In case of merger, acquisition, or sale of assets

6. Social Media Platform Access

When you connect social media accounts to OneBox:

• We only access data necessary to provide our services
• You can revoke access at any time through your social media account settings
• We comply with each platform's terms of service and data policies
• Access tokens are refreshed as needed and securely stored

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time. After deletion:

• Your personal data will be removed within 30 days
• Some data may be retained for legal or legitimate business purposes
• Anonymized data may be retained for analytics

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Revoke access: Disconnect social media accounts

9. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your logged-in session
• Remember your preferences
• Analyze platform usage
• Improve security

You can control cookie settings through your browser preferences.

10. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 13, we will take steps to delete such information promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Material changes will be communicated via email or prominent notice on our platform.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: privacy@onebox.social
• Address: OneBox, Inc., 123 Tech Street, San Francisco, CA 94105

14. Data Protection Officer

For privacy-related inquiries specific to GDPR or other data protection regulations, you can contact our Data Protection Officer at: dpo@onebox.social

15. Compliance

We are committed to complying with applicable data protection laws, including:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Other applicable regional privacy laws