Start free

Legal

Privacy Policy

Template text — have your legal counsel review before publishing. This is the built-in starting text (version of 17 October 2026). Replace it with your own in the admin dashboard under Content, and this notice disappears. Parts in [square brackets] need your details.

1. Who is responsible

Iglubox operates Iglubox and is the controller of the personal data described here. [Registered address.] You can reach us through support@iglubox.com or the contact page. [Data protection officer or EU/UK representative, if you have one.]

2. What we collect, and why

  • Account data: your email address, display name, language and time zone, your password (stored only as a one-way hash) and your two-factor settings. We use it to create and secure your account (to perform our contract with you).
  • Your content: files and folders, their names, sizes, versions, sharing settings and the activity around them. We use it to provide the service you asked for (contract).
  • Technical and security data: IP addresses, the browser or device name of each signed-in session, sign-in attempts and security logs. We use it to protect accounts and the service (our legitimate interest in security).
  • Billing data: your plan, subscription status and invoice records. Card details are collected and processed by Stripe; we do not receive or store them (contract and legal obligations).
  • Messages: what you send us through the contact form, so that we can answer it.
  • No analytics. This website does not use analytics or advertising cookies.

3. Cookies and similar storage

  • Signing in to the app uses a cookie that keeps you signed in. It is strictly necessary and is not used for tracking.
  • This website stores your light or dark theme choice in your browser (local storage), and, only if analytics is available, a cookie called igx_consent that remembers your cookie choice for six months. Neither is sent anywhere else.
  • No other cookies are set by this website.

4. Who receives data

We do not sell personal data. We use service providers (processors) who handle data on our behalf:

  • Stripe, to process payments.
  • [Email delivery provider], to send account and service emails.
  • [Hosting and storage providers], where the service and your files are kept.

5. Transfers outside your country

[Describe where data is stored and any transfers outside the EU/EEA or UK, with the safeguards you rely on.]

6. How long we keep data

  • Files stay until you delete them. Deleted files remain in the trash for the retention period of your plan and are then removed. Older versions are kept for the version history period of your plan.
  • Your account: when you delete it, the files and personal data are permanently erased after a retention period (30 days by default). Billing records are kept as long as the law requires, without the rest of your account data.
  • Security logs: [retention period].

7. Security

Files are encrypted on the server before they are stored, and traffic uses TLS. The security page explains this in detail, including its limits. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.

8. Your rights

Depending on where you live, you can ask for access to your data, correction, deletion, restriction of processing, a copy in a portable format, and you can object to processing based on our legitimate interests or withdraw consent you gave. You can delete your account yourself in the account settings, and download your files at any time. To use the other rights, contact us through support@iglubox.com or the contact page. You can also complain to your data protection authority.

9. Children

Iglubox is not meant for children under [minimum age]. If you believe a child has created an account, please contact us.

10. Changes

We may update this policy. When a change is material, we will tell you in the service or by email before it applies.