Privacy Policy

What we collect

When you use Ubibox, we collect:

• Account info — your name, email, and password (hashed) when you register, or profile info from Google if you sign in that way
• Contacts you add — names, emails, phone numbers, and notes you save about your contacts
• Integration data — if you connect Gmail, we access emails related to your contacts. If you connect Scrive, we access your templates and contract status
• Usage data — basic analytics like pages visited, features used, and errors encountered

How we use it

• To provide the service (showing your contacts, sending emails, etc.)
• To improve the product based on how people use it
• To send you important updates about your account
• To respond when you contact support

We don't sell your data. We don't use it for advertising. It's yours.

Third-party services

We use a few services to make Ubibox work:

• MongoDB Atlas — stores your data (encrypted at rest)
• Google OAuth — handles sign-in if you use "Continue with Google"
• Gmail API — sends and fetches emails when you connect your Gmail
• Scrive — handles e-signatures when you connect your Scrive account
• Vercel — hosts the application
• Resend — sends transactional emails (verification, password reset)

Data security

All connections use HTTPS. Passwords are hashed with bcrypt. We use OAuth tokens for Gmail and Scrive (we never see your passwords for those services). Database access is restricted and encrypted.

Your rights

You can:

• Export your data anytime from the dashboard
• Delete your account and all associated data
• Disconnect integrations (Gmail, Scrive) at any time
• Email us at info@ubibox.io to request anything GDPR-related

Cookies

We use cookies to keep you logged in. That's basically it. No tracking cookies, no third-party ad cookies.

Changes

If we make significant changes to this policy, we'll let you know via email or a notice in the app.

Contact

Questions? Email us at info@ubibox.io