CryptoBox | Privacy Policy

Last Updated: May 10, 2023

CryptoBox ("DIGITAL INVESTORS CAPITAL," "we," "us," or "our") respects your privacy and is committed to protecting your personal information, also known as "personal data." This Privacy Policy provides general information about our privacy practices and details how we collect, use, and share your information when you visit our website cryptobox.ai (the “Website”) and/or use our CryptoBox cryptocurrency services (the “Services”).

This Policy informs you about:

(i) how we handle and protect your personal data,

(ii) our obligations in processing personal data responsibly and securely,

(iii) your data protection rights as a data subject, and (iv) how the law protects you. This Policy should be read alongside our Terms of Service.

Disclaimer: For clarity, this Policy does not apply to any other services we may offer unless specified otherwise.

Who We Are and How to Contact Us

DIGITAL INVESTORS CAPITAL, LLC is the data controller responsible for determining what personal information we collect and how it is used or shared.

We are located at:
DIGITAL INVESTORS CAPITAL, LLC
650 California Street, San Francisco, CA 94108

The Website is operated by DIGITAL INVESTORS CAPITAL, LLC. The Website is not intended for minors, and our Services are not directed towards minors. Therefore, we do not knowingly collect personal data related to minors.

We may update and revise this Privacy Policy from time to time. Whenever we make changes to this Policy, we will update the effective date above. We encourage you to review this Privacy Policy periodically. Each time you wish to use our Website, please review these terms to ensure you understand the terms that apply at that time.

If you have any questions about our Privacy Policy or privacy practices, please contact us by email at [email protected].

Queries and Complaints

We have appointed a Data Protection Contact Point (DPCP) to oversee questions related to this Policy and our processing activities.

If you have any questions or requests, including requests to exercise your data subject rights, please contact the DPCP using the details below.

Contact Details
Company Name: DIGITAL INVESTORS CAPITAL, LLC
DPCP Name: CryptoBox
Email Address: [email protected]
Postal Address: 650 California Street, San Francisco, CA 94108

You have the right to complain to a competent supervisory authority on data protection matters, such as the one in your habitual residence or workplace. For example, in Malta, this is the Information and Data Protection Commissioner’s Office (IDPC) (https://idpc.org.mt). However, we encourage you to contact us first to address your concerns before reaching out to the regulatory body.

Third-Party Links

Our Website and/or Services may include links to third-party websites, plugins, and applications. Clicking these links or enabling these connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements, notices, or policies.

We encourage you to read the privacy notices of any third-party websites you visit.

Information We Collect About You

We collect information about you directly from you and indirectly through your interactions with us or your use of our Services or Website. The types of information we may collect include:

Identifying and Contact Information: Name, email address, or phone number.
Transaction Information: Information related to signature keys, verification metrics, and other metrics related to your use of our Services, as well as details of the accounts and payments related to our services.
Technical Information: Internet Protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices used to access our Website or Services.
Usage Information: Information about how you use our Website or Services, such as duration, time, and pages visited.
Marketing Information: Preferences for receiving marketing information from us.
Geolocation Information: Identifying your location to ensure our services are provided only in certain countries.

We do not knowingly collect special categories of personal data or sensitive personal data. If we receive sensitive personal data, we will only process it under legal grounds and reasons, and always in compliance with legal obligations and appropriate safeguards.

How We Use Your Information

We use the information we collect about you only in accordance with applicable laws for the following purposes:

To provide our Services as requested
To fulfill contracts with you or third parties
To protect the security and integrity of our business and Services
For marketing purposes
For business sales, mergers, or other reorganization
To comply with legal obligations, such as crime prevention, detection, or investigation, loss prevention, or fraud
When necessary for our legitimate interests (provided your interests and fundamental rights do not override these interests).

Legal Basis for Processing Your Information

The table below outlines the purposes for which we may use your personal data and the legal basis we rely on. We also identify our legitimate interests where applicable.

Purpose/Activity	Information Type	Legal Basis for Processing
Register you as a customer	Identifying and Contact Information	Performance of Contract
Provide Services	Identifying and Contact Information; Transaction Information; Geolocation Information	Performance of Contract Legitimate Interests (e.g., debt recovery)
Manage our relationship, including answering queries, providing requested marketing information, and interacting on social media	Identifying and Contact Information; Transaction Information; Social Media Application Information; Marketing Information	Performance of Contract Legitimate Interests (e.g., improving our services, developing our business)
(a) Detect, investigate, and prevent fraudulent activities and/or other criminal activities. (b) Assist and cooperate with any criminal or regulatory investigation against you. (c) Risk management: Effective operation of our audit, compliance controls, and other risk management functions.	Identifying and Contact Information; Technical Information; Usage Information; Geolocation Information	Legitimate Interests (e.g., running our business, providing management and IT services, cybersecurity, fraud prevention, business reorganization) Compliance with Legal Obligations
Manage and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and data hosting)	Identifying and Contact Information; Technical Information; Usage Information; Geolocation Information	Legitimate Interests (e.g., running our business, providing management and IT services, cybersecurity, fraud prevention, business reorganization) Compliance with Legal Obligations
Use data analytics to improve our website, products, and services, marketing, customer relationships, and experiences	Technical Information; Usage Information	Legitimate Interests (e.g., defining customer types, keeping our website updated and relevant, developing our business, and informing our marketing strategy)

Marketing

We are committed to offering you choices regarding the personal data we use for identification, usage, and marketing. By analyzing your identification, usage, and marketing data, we can form a view of what you might need or want.

You may receive marketing communications from us (which may include newsletters, industry updates, promotional emails, publications, promotional materials, and/or information about our events) if:

You have consented to receive such marketing materials; or
You have an ongoing commercial or contractual relationship with us (e.g., we consider you an active customer); and
You have not opted out of receiving our marketing information.

Third-Party Marketing

Before sharing your personal data with any third party (including our affiliates or related entities) for marketing purposes, we will obtain your explicit consent.

Opt-Out

You may request that we stop sending advertising and marketing communications at any time:

By following the opt-out links in any marketing message;
By contacting us at [email protected] at any time.

Opting out of these communications will not affect the processing or provision of personal data as part of your ongoing customer relationship with us.

Change of Purpose

We will only use your personal data for the purposes for which we collected it unless we reasonably believe that we need to use it for another reason that is compatible with the original purpose or we are required to process it by law or court order.

If we need to use your personal data for unrelated purposes, we will notify you and explain the legal basis that allows us to do so.

Please note, that we may process your personal data without your knowledge or consent where required or permitted by law.

How We Share Your Information

We may share your information with third parties/entities for business purposes.

Service Providers/Vendors: We outsource certain support services to vendors or service providers. We require all service providers/vendors to process your information in accordance with applicable laws and our specific instructions.
Business Partners: We may share information with business partners to provide the services you request. We will ensure your information is protected through contracts.
Professional Advisers: We may share information with legal, insurance, accounting, auditing, or other professional advisers.
Regulators, Law Enforcement, or Other Legal Requirements: We may share your personal data with regulators, law enforcement, or other compliance requirements as required or permitted by law.
Business Transfers: We may share information in the event of business sales, mergers, asset acquisitions, or bankruptcy.
Third-Party Service Providers: Third-party service providers providing technology, data analysis, payment processing, or other services may process your information. We require all such third parties to process your information in accordance with applicable laws and our instructions.

Data Transfers

Our business operations may require transferring personal data to countries outside the European Economic Area (EEA). We will take appropriate measures to ensure that this data is protected during transfer and in the receiving country, such as using standard contractual clauses or other legal mechanisms.

Data Protection Rights

Under applicable data protection laws, you may have the following rights:

Right to Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request correction or updating of inaccurate or incomplete personal data.
Right to Erasure: You have the right to request deletion of personal data in certain circumstances.
Right to Object: You have the right to object to our processing of your personal data based on legitimate interests.
Right to Restrict Processing: You have the right to request the restriction of processing your personal data in certain circumstances.
Right to Data Portability: You have the right to request that personal data be transferred to another organization in a machine-readable format in certain circumstances.
Right to Withdraw Consent: In certain cases, you can withdraw consent you have previously provided; withdrawal does not affect the legality of processing before withdrawal.

Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, modification, or destruction. We will notify you and relevant regulators of any data breaches as required by law.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. In some cases, we may need to retain data to comply with legal requirements, such as tax or accounting purposes. We will retain data for up to five years when necessary.