Loading ....

Privacy Policy - CuriousBox AI Inc.

Effective Date: April 7th, 2025

CuriousBox AI Inc. ("CuriousBox AI" "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ProdE development tool, our website at www.curiousbox.ai, and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

IMPORTANT: BY ACCESSING OR USING THE SERVICE, YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT YOUR CONTINUED USE OF THE SERVICE CONSTITUTES YOUR ONGOING CONSENT TO THE COLLECTION, PROCESSING, USE, AND SHARING OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY. THIS INCLUDES ANY UPDATES OR CHANGES TO THIS POLICY THAT WE MAY PUBLISH FROM TIME TO TIME.

Legal Bases for Processing

We rely on various legal bases to process your information lawfully, including:

  • Performance of Contract: Processing necessary to provide the Service and fulfill our obligations under our Terms of Service or other agreements with you.
  • Legitimate Interests: Processing necessary for our legitimate interests or those of third parties, provided these interests are not overridden by your rights and freedoms. These legitimate interests include providing, improving, and securing our Service; business operations; marketing; and fraud prevention.
  • Compliance with Legal Obligations: Processing necessary to comply with applicable laws, regulations, court orders, or other legal requirements.
  • Consent: Processing based on your specific consent, such as for certain marketing communications or where otherwise required by law.
  • Vital Interests: In rare circumstances, processing may be necessary to protect someone's vital interests.

Where we rely on consent, you have the right to withdraw consent at any time, though this will not affect the lawfulness of processing based on consent before its withdrawal.

Information We Collect
Personal Information

We may collect the following categories of personal information:

  • Account Information: When you register for an account, we collect your name, email address, and account credentials.
  • Billing Information: For paid subscriptions, payment information is processed by our trusted third-party payment processor. We receive limited transaction data but do not directly collect or store your credit card details.
  • Profile Information: Information you provide in your user profile, such as job title, employer, professional background, and profile picture.
  • Usage Information: Information about how you use our Service, including features accessed, time spent, and actions taken.
  • Communication Data: Records of your communications with us, including support requests, feedback, and survey responses.
Technical Information
  • Device Information: Information about your device, including IP address, device type, operating system, and browser type.
  • Log Data: Information that your browser automatically sends whenever you visit our website or use our Service, including access times, pages viewed, and referring websites.
  • Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies. For more information, please see our Cookie Policy.
Code and Content Information
  • User Content: We collect code, text, and other materials you input, upload, or otherwise submit to the Service.
  • AI Interactions: We collect information about your interactions with our AI features, including prompts, queries, and selections you make.
  • Project Information: Data about your projects, repositories, and codebase structure as necessary to provide our Service.
How We Use Your Information
To Provide Our Service
  • Creating and managing your account
  • Delivering our AI-powered code suggestions and assistance
  • Processing transactions and managing subscriptions
  • Providing customer support
  • Sending service-related communications
To Improve Our Service
  • Analyzing usage patterns to enhance functionality
  • Debugging and fixing issues
  • Developing new features and capabilities
  • We do not Train and improve our AI models using your Codebase.
  • Conducting research and analytics
For Legal and Security Purposes
  • Enforcing our Terms of Service
  • Protecting against malicious, deceptive, or fraudulent activity
  • Complying with legal obligations
  • Establishing, exercising, or defending legal claims
For Marketing and Communication
  • Sending promotional communications (subject to your preferences)
  • Informing you about new features, updates, and offers
  • Conducting surveys and collecting feedback
Marketing Communications

We may send you marketing communications about our products and services that we believe may interest you. The legal basis for this processing is either consent or our legitimate interests, depending on applicable law and the type of communication.

In regions where express opt-in consent is required by law (such as the European Economic Area, United Kingdom, and certain other jurisdictions), we will only send marketing communications when you have opted in to receive such communications. In other regions, we may send marketing communications based on our legitimate interests, and you will always have the opportunity to opt out.

You can opt out of receiving marketing communications at any time by:

  • Clicking the "unsubscribe" link in marketing emails
  • Adjusting your communication preferences in your account settings
  • Contacting us at contact@curiousbox.ai

Please note that even if you opt out of marketing communications, we may still send you service-related communications that are necessary for the administration of your account or to fulfill our contractual obligations to you.

Disclosure of Your Information

We may share your personal information with the following categories of recipients:

Service Providers

We may share your information with third-party vendors, consultants, and other service providers who need access to such information to carry out work on our behalf, such as:

  • Cloud hosting providers
  • Payment processors
  • Analytics services
  • Customer support services

All service providers are contractually obligated to use your information solely as necessary to provide their services to us and in compliance with applicable privacy laws.

Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

Legal Requirements

We may disclose your information where required by law or if we reasonably believe that such action is necessary to:

  • Comply with legal obligations or valid legal process
  • Protect the rights, property, or safety of CuriousBox AI, our users, or others
  • Prevent or investigate possible wrongdoing
  • Enforce our Terms of Service
With Your Consent

We may share your information with third parties when you have given us your consent to do so.

Data Security

We implement commercially reasonable technical and organizational measures designed to protect your information. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee its absolute security.

We aim to maintain information security by protecting data against:

  • Unauthorized access
  • Improper disclosure
  • Alteration or destruction

However, due to the inherent nature of the Internet and data transmission, we cannot guarantee that unauthorized access, hacking, data loss, or other breaches will never occur. We encourage you to take steps to protect your own personal information, including maintaining the confidentiality of your account credentials.

If we become aware of a data breach that is reasonably likely to result in a risk to your rights and freedoms, we will take measures to notify affected users as may be appropriate under the circumstances and as may be required under applicable law. Our notification may be delayed if doing so would impede a criminal investigation or if we need time to determine the scope of the breach and restore reasonable integrity to the system.

Data Retention

We retain different categories of information for different periods based on our business needs and legal requirements:

  • Account Information: We typically retain your account information for up to 7 years after account closure to comply with tax, accounting, and other legal requirements.
  • Usage Data: We typically retain usage data for up to 2 years to improve and optimize our Service.
  • Technical Logs: We typically retain logs and technical information for up to 90 days for security and troubleshooting purposes.
  • Marketing Data: We retain marketing preferences until you opt out or after 3 years of account inactivity.
  • Billing Information: We retain billing records for up to 7 years to comply with tax and accounting requirements.

These retention periods may be extended if:

  • We are required to retain the information for legal reasons (such as tax or accounting regulations)
  • There is an outstanding issue, claim, or dispute requiring us to keep the relevant information
  • The information is needed for legitimate business purposes, such as fraud prevention

When we no longer need the information, we will securely delete or anonymize it.

International Data Transfers

Your information may be transferred to, stored, and processed in countries other than the one in which you reside. In particular, our servers are located in the United States, and our service providers may be located in various countries worldwide.

When we transfer personal information outside of your jurisdiction, we implement appropriate safeguards to protect your information, which may include:

  • Standard contractual clauses approved by relevant regulatory authorities
  • Binding corporate rules
  • Adequacy decisions (where transfers are to countries that have been deemed to provide an adequate level of protection)
  • Derogations for specific situations as permitted by applicable law
  • Any other legally approved mechanisms that are recognized as providing adequate protection

We maintain flexibility in our data transfer mechanisms to adapt to changing regulatory landscapes and to ensure ongoing compliance. By using our Service, you consent to these transfers in accordance with this Privacy Policy.

Specific Privacy Provisions for India

For users located in India, we comply with applicable provisions of India's data protection laws, including the Digital Personal Data Protection Act, 2023 ("DPDPA") and related regulations. Your personal information is processed in accordance with this Privacy Policy and applicable Indian laws.

Data Localization and Cross-Border Transfers

In accordance with Indian law, we may store certain categories of personal data on servers within India and/or implement approved mechanisms for cross-border transfers of Indian users' personal data. These mechanisms comply with requirements established by Indian regulatory authorities.

Consent Requirements

Where required by Indian law, we obtain specific, clear consent for collecting and processing certain categories of personal data. You have the right to withdraw this consent at any time, subject to legal requirements.

Data Principal Rights

As a "data principal" under Indian law, you have certain rights regarding your personal data, including the right to:

  • Confirm whether we process your personal data
  • Access your personal data
  • Correct inaccurate personal data
  • Erase your personal data in certain circumstances
  • Nominate another person to exercise your rights in case of incapacity or death

To exercise these rights, please contact us at contact@curiousbox.ai.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.

Correction

You have the right to request that we correct any inaccurate or incomplete information we hold about you.

Deletion

You have the right to request the deletion of your personal information in certain circumstances. Please note that we may need to retain certain information for record-keeping purposes, to complete transactions, or to comply with our legal obligations.

Restriction and Objection

You have the right to request that we restrict the processing of your personal information. You also have the right to object to the processing of your personal information in certain circumstances.

Consent Withdrawal

Where we rely on your consent to process your personal information, you have the right to withdraw your consent at any time.

Exercise Your Rights

To exercise these rights, please contact us at contact@curiousbox.ai. We will respond to your request within a reasonable timeframe, typically within 30 days.

Do Not Track Signals

Some browsers feature a "Do Not Track" (DNT) setting that requests that websites not track your browsing activity. While we strive to honor your privacy preferences, there is currently no industry standard for responding to DNT signals. As such, we do not currently alter our data collection and use practices in response to DNT signals.

Children's Privacy

Our Service is not directed to children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children. If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us at contact@curiousbox.aiso that we can take appropriate action.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to:

  • Know what personal information is being collected about you
  • Know whether your personal information is sold or disclosed and to whom
  • Opt-out of the sale of your personal information
  • Access your personal information
  • Request deletion of your personal information
  • Non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at contact@curiousbox.ai.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will post the updated version and change the Effective Date above. Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the terms of the revised Privacy Policy.

For significant changes, we will provide additional notice, such as adding a statement to our website's homepage or sending you an email notification.

Force Majeure

We will not be liable for any failure to perform our obligations under this Privacy Policy where such failure results from any cause beyond our reasonable control, including but not limited to, natural disasters, pandemics, cyber-attacks, mechanical, electronic or communications failure, governmental actions, or other events which are beyond our reasonable control.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

CuriousBox AI Inc.

Attn: Privacy Team

Email: contact@curiousbox.ai

For data subjects in the European Union, CuriousBox AI Inc. is the data controller responsible for your personal information. If you have any concerns about how we process your personal information, you also have the right to lodge a complaint with your local data protection authority.