Privacy Policy

Troy Steel Pty Ltd is the data controller for the personal data collected through BuildBox.OS. If you have questions about this policy or your data, contact us at privacy@ubuntubizbox.com.

• Identity & contact: name, email address, organisation name.
• Account & security: login credentials, authentication tokens, role assignments.
• Usage & telemetry: pages visited, features used, template selections, device type, browser, IP address.
• Support & communications: messages sent to support, feedback, onboarding progress.
• Payment data: Paddle processes payment details directly; we do not store card numbers.

• Service providers: hosting, analytics, email delivery, and customer-support tooling.
• Paddle.com: our Merchant of Record for subscription management, payments, tax compliance and invoicing. Paddle acts as an independent data controller for payment processing.
• Professional advisers: legal and accounting professionals, bound by confidentiality.
• Authorities: where required by law or to protect our rights.

We keep your personal data for as long as your account is active or as needed to provide the service. After account closure, we retain data for 12 months for legal, tax and security purposes, then delete or anonymise it.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with your local supervisory authority

To exercise any of these rights, email privacy@ubuntubizbox.com. We respond within one month.

We use industry-standard technical and organisational measures to protect your data, including AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, and regular security reviews.

We use essential cookies to operate the service (authentication, session management) and analytics cookies to understand usage. You can manage cookie preferences through your browser settings. We do not sell your data to third parties for advertising.