Privacy Policy

1. Introduction

Genbox ("we", "us", or "our") is a product of RupeeStack Platform Private Limited, a company incorporated under the laws of India. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at genbox.dev and related services (collectively, the "Service").

2. Information We Collect

We may collect the following types of information:

• Account Information: Email address, name, and authentication credentials when you create an account.
• Usage Data: Information about how you interact with the Service, including pages visited, features used, session duration, and device information.
• Technical Data: IP address, browser type, operating system, and other technical identifiers.
• Payment Information: Billing details processed through our third-party payment providers. We do not store full payment card details on our servers.
• Cloud Credentials: AI provider credentials you choose to sync for use with Genbox environments. These are encrypted at rest using AES-256-GCM.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Authenticate your identity and manage your account.
• Provision and manage cloud development environments on your behalf.
• Process transactions and send related billing information.
• Communicate with you about updates, security alerts, and support.
• Monitor and analyze usage trends to improve user experience.
• Comply with legal obligations.

4. Information Sharing

We do not sell your personal information. We may share information with:

• Infrastructure Providers: Cloud hosting providers (e.g., Hetzner) to provision your development environments.
• Payment Processors: Third-party payment services to process transactions.
• Legal Requirements: When required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

5. Data Security

We implement industry-standard security measures to protect your information. Credentials are encrypted at rest using AES-256-GCM. Development environments are fully isolated VMs with encrypted storage. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. You can control cookie settings through your browser. Disabling cookies may affect the functionality of the Service.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data.
• Rectify inaccurate or incomplete personal data.
• Request deletion of your personal data.
• Object to or restrict the processing of your personal data.
• Data portability.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at the email address below.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. We may also retain certain information as required by law or for legitimate business purposes. Development environments and associated data are ephemeral and destroyed when you terminate them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.