Privacy Policy
The Information We Collect
Account Information. We use your email address from other websites, such as GitHub, BitBucket or GitLab, as your username.
We’ll also use your eamil address for billing information.
Information About Your Use of Zbox. We receive some information automatically when you use any Zbox product. This includes data about your device, software, and the operating system you use when accessing our service, approximate amount of data stored on our service, your Internet Protocol address, system-generated error messages for your account, and the date and time of each request you make to Zbox.
How We Use Your Information
We use your personal information to keep Zbox running, understand how you use our service, customize your experience, prevent abuse, provide customer support, sell and market our products, and improve Zbox. We use your information internally only as necessary to accomplish these goals.
How We Disclose Your Information
We share your personally identifiable information only in the limited circumstances below. Zbox never sells your information or shares it with third-party advertisers.
With your permission. We may share your information with your consent, after letting you know what information will be shared and with whom.
In response to the law. We may disclose your information if we believe it is reasonably necessary to comply with a law, regulation, or valid legal process. If we are going to release your information, our policy is to provide you with notice unless we are prohibited from doing so by law or court order (e.g., an order under 18 U.S.C. § 2705(b)). We may disclose your information without giving you prior notice if we believe it’s necessary to prevent imminent and serious bodily harm to a person. Nothing in this policy is intended to limit any legal objections or defenses you might have to demands to compel disclosure of your information, including demands from the government.
With third parties helping us provide Zbox. We may share your information with third-party services helping us provide our products and services. Those third parties access and use the information we share with them only on our behalf. They include Amazon, Google, and Stripe. Please note that this Privacy Policy explains Zbox’s practices only, and doesn’t cover the practices of other services. Take a look at those companies’ privacy policies to learn more about their data practices.
Aggregate information. We may disclose aggregate, non-identifying information about how our users use Zbox products.
Sale or merger. If all or part of Zbox is sold, merged, or otherwise transferred to another company in the future, your information may be transferred as part of that transaction. If that happens, Zbox will take reasonable steps to make sure your information continues to be treated consistently with this privacy policy.
Cookies
- A cookie is a small amount of data, which often includes an anonymous unique identifier, that is sent to your browser from a web site's computers and stored on your computer's hard drive.
- Cookies are required to use the Zbox service.
- We use cookies to record current session information, but do not use permanent cookies. You are required to re-login to your Zbox account after a certain period of time has elapsed to protect you against others accidentally accessing your account contents.
Account Termination
You can disable your Zbox account at any time by signing in and canceling it online. This means your user account will no longer be active on our service, and your data will be automatically deleted in the normal course of business with no further notice to you.
Data Security
Zbox service are designed to have several layers of security.
We encrypt files on client side before you upload to Zbox servers. We use the AES-256 or XChaCha20-Poly1305 algorithm. You control your encryption keys, and Zbox does not have access to them.
We use Secure Sockets Layer (SSL)/Transport Layer Security (TLS) to create a secure tunnel to protect data in transit between your apps and Zbox servers.
We don’t store your account passphrase on our servers in any form. Your passphrase is only on your device, and we hash and salt it to help protect it against possible compromise.
We limit the number of Zbox employees who have access to user data through policy and technical access controls.
No transmission over the internet is completely secure, so we can’t absolutely guarantee that unauthorized parties won’t be able to defeat our security measures. You use Zbox at your own risk, and are responsible for taking reasonable measures to secure your account (such as choosing a strong, unique passphrase and keeping it secret).
We are always on the lookout for vulnerabilities in Zbox. If you discover a vulnerability in our service, we would be grateful for your report and encourage you to let us know immediately. If you give us reasonable time to respond to your report before making any information public, and make a good-faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service during your research, we will not pursue any legal action against you or ask law enforcement to investigate your actions.
To report a security vulnerability, please email support@zbox.io.
Changes to This Policy
We may revise this Privacy Policy from time to time. The most current version of the policy will govern our use of your information and will always be at https://spideroak.com/policy/privacy-policy. If we make changes that we believe will substantially alter your rights, we will post the revisions 7 days before they take effect so you can review them.
Contact
We would love to hear from you. Zbox welcomes questions, concerns, and feedback about this policy. If you have suggestions for us, let us know at support@zbox.io.