Privacy Policy & Personal Data

1. SCOPE OF APPLICATION

This policy applies when you:

Visit the EditBox website.
Register, sign in, or manage your account.
Browse, receive, and download digital resources.
Subscribe to or use Membership plans.
Purchase and use digital services.
Make payments or manage transactions.
Contact support, request warranty, or submit inquiries/claims.

EditBox processes personal data within the scope necessary to provide products and services, protect system infrastructure, and comply with applicable legal obligations.

2. INFORMATION WE COLLECT

2.1. Account Information

When registering or using an EditBox account, we may collect:

Email address.
Username or display name.
Account identifier code.
Information necessary for login and authentication.
Account status and related settings.

If you sign in using Google or third-party authentication services, EditBox may receive basic information shared by that provider within the scope of authorized permissions.

EditBox does not require users to provide their Google account password to our system.

Certain information is required to create an account and deliver services. If not provided, users may be unable to use corresponding functions.

2.2. Transaction and Payment Information

When making a transaction, the system may record:

Order code and transaction reference.
Product, service, or plan subscribed to.
Payment amount and timestamp.
Payment method and payment status.
Transaction reconciliation details.
Activation, delivery, and entitlement usage history.
Support, warranty, or refund requests.

This information is used to confirm payments, provision the correct products, manage transactions, and resolve arising issues.

EditBox does not require customers to provide bank passwords, OTP codes, or sensitive payment authentication credentials.

Certain transactions are processed through banks or third-party payment gateways and may be governed by the respective provider's privacy policies.

2.3. Resource and Membership Usage Information

To manage user entitlements, EditBox may record:

History of receiving or downloading resources.
Access permissions granted.
Timestamps of accessing or using download links.
Download quotas and remaining download counts.
Membership duration, status, and entitlements.
Access rights to related courses or services.
Events necessary to verify product delivery.

This information helps EditBox deliver correct entitlements, prevent abuse, and facilitate investigation when issues arise.

2.4. Technical and Security Information

When visiting the website, the system may automatically record:

IP address.
Access timestamp.
Device and browser type.
User-Agent information.
Cookies and session data.
Activity logs and system error logs.
Security events or abnormal access patterns.

Technical data is used to maintain website operation, troubleshoot errors, protect user accounts, and prevent fraudulent activity.

EditBox does not sell user behavioral data or use such data for retargeting advertising.

2.5. Contact and Support Information

When contacting EditBox via the website, email, Telegram, Zalo, or other official channels, we may receive:

Contact details you provide.
Support inquiry content.
Order code or related transaction details.
Images, videos, or documents illustrating the issue.
Communication history and resolution outcomes.

This information is used strictly within the scope necessary to verify and resolve requests.

Customers should not send passwords, OTPs, secret access keys, or sensitive financial credentials via support channels.

3. PURPOSES OF USE

EditBox uses personal data to:

Create, verify, and manage user accounts.
Process orders and confirm payments.
Grant access rights and deliver downloadable resources.
Activate and manage Membership plans, courses, and services.
Record and protect transaction entitlements.
Provide technical support, warranty assistance, and complaint resolution.
Detect fraud and prevent unauthorized access.
Maintain, debug, and improve website operations.
Fulfill legal obligations upon valid authority requests.

EditBox processes data only within the scope necessary and on appropriate legal bases for each purpose.

Account registration or agreeing to the Terms of Service does not imply consent to receive marketing advertisements or authorize unnecessary data processing activities.

When a processing activity requires separate consent, EditBox will provide information and appropriate opt-in choices in compliance with applicable law.

4. COOKIES AND STORAGE TECHNOLOGIES

EditBox may use cookies or similar storage technologies to maintain stable and secure website operations.

Purposes of use include:

Maintaining authenticated login states.
Protecting session security.
Remembering selected language or interface theme preferences.
Preventing unauthorized access and operations.
Supporting essential website functionalities.

Certain cookies are strictly necessary to use accounts and related features.

If EditBox implements non-essential analytics, measurement, or tracking tools, we will inform users and provide appropriate options where required by law.

Users can manage or delete cookies via browser settings. However, disabling essential cookies may prevent login or certain features from operating normally.

EditBox does not sell cookie data or use behavioral data for retargeting advertising.

5. SHARING INFORMATION WITH THIRD PARTIES

EditBox does not sell, rent, or trade user personal data to advertising organizations or data brokers.

During business operations, certain information may be shared with essential service providers, including:

Server hosting and website infrastructure providers.
Storage and resource delivery services such as Google Drive.
Login and authentication service providers.
Banks, payment gateways, or reconciliation entities.
Email delivery and notification service providers.
Support, cybersecurity, or incident remediation platforms.

Information is shared strictly within the scope necessary to deliver services, execute transactions, or fulfill lawful obligations.

Certain providers may process data on systems located outside Vietnam. EditBox fulfills obligations related to cross-border data transfer and processing in accordance with applicable laws.

When users access links or use third-party services, the respective provider's privacy policy may apply.

EditBox may also disclose information upon lawful requests from competent authorities or when necessary to investigate fraud, protect system integrity, and resolve disputes in accordance with the law.

6. PROTECTION OF PERSONAL INFORMATION

EditBox implements appropriate technical and organizational measures to mitigate risks of unauthorized access, loss, disclosure, or misuse of information.

Security measures may include:

Strict system access control.
Safeguarding login credentials and active sessions.
Using secure encrypted connections during data transmission.
Monitoring and detecting abnormal activities.
Data backup and system recovery capabilities.
Security incident inspection and remediation protocols.

Access to data is restricted based on operational duties and strictly necessary scope.

While prioritizing security, no online system can guarantee absolute safety against all potential risks.

Upon discovering an incident concerning personal data, EditBox will investigate, contain the impact, remediate, and fulfill legal notification obligations.

Users are responsible for safeguarding login credentials, not sharing passwords or authentication codes, and promptly notifying EditBox upon noticing abnormal access signs.

7. DATA RETENTION PERIOD

EditBox retains personal data for the duration necessary to provide services, manage accounts, fulfill transactions, protect systems, and satisfy legal obligations.

Retention periods may vary for:

Account and login information.
Order and payment history.
Resource receipt, download, and usage logs.
Membership details and access permissions.
Warranty, support, and dispute records.
Technical logs and security event records.
Terms acceptance records.
System backup and disaster recovery data.

When data is no longer necessary and does not fall under mandatory retention obligations, EditBox will delete, anonymize, or apply appropriate handling measures.

Certain transaction, security, or related records may need to be retained after account closure to satisfy statutory obligations or resolve disputes.

Account deletion does not imply that all related data is purged immediately if legitimate retention grounds still exist.

8. USER RIGHTS

EditBox respects user rights regarding personal data in accordance with applicable law.

Depending on specific circumstances and statutory criteria, users may:

Request information about how personal data is processed.
Access or request a copy of their personal data.
Request correction of inaccurate information.
Request deletion of eligible data.
Withdraw consent for consent-based processing activities, where applicable.
Request restriction of or object to certain data processing activities.
Lodge complaints if they believe data is processed inappropriately.

Users can submit requests via official support channels published on the EditBox website.

To safeguard accounts, EditBox may require identity verification before disclosing, rectifying, or deleting personal data.

Requests will be reviewed and processed in accordance with legal regulations. If certain data cannot be deleted or provided due to statutory reasons, EditBox will explain the applicable scope and legal grounds.

Withdrawing consent does not invalidate prior lawful processing activities nor automatically eliminate statutory retention obligations.

9. EMAIL AND NOTIFICATIONS

EditBox may send essential emails or notices related to accounts and services, including:

Account verification and password reset messages.
Order confirmations and payment receipts.
Membership and digital service activation notices.
Access permission status updates.
Security alerts or abnormal activity notifications.
Responses to support inquiries, warranty requests, and complaints.
Notices of critical system updates.

Currently, EditBox does not operate recurring promotional email campaigns.

EditBox does not sell user email lists to third parties for marketing purposes.

If email marketing activities are introduced in the future, EditBox will provide prior notice and implement consent, opt-out, or unsubscribe mechanisms in accordance with the law.

Registering an account or purchasing products is not automatically treated as consent to receive promotional emails.

10. EXTERNAL LINKS AND SERVICES

The EditBox website may contain links to Google Drive, Telegram, Discord, Zalo, payment processors, and other third-party platforms.

When accessing these platforms, users may be subject to the separate terms of service and privacy policies of each respective provider.

EditBox does not directly control data processing activities carried out independently by external platforms.

Users should inspect website URLs and third-party privacy policies before disclosing personal information.

For data transferred or processed through third parties to deliver EditBox services, EditBox remains committed to fulfilling its statutory responsibilities.

11. CHILDREN'S DATA PROTECTION

EditBox does not knowingly collect personal data from children in violation of applicable laws.

Users who do not meet statutory age or transactional capacity requirements must have parental or guardian consent or participation where required by law.

If we discover that a child's data has been collected or processed inappropriately, EditBox will review and apply measures to restrict, delete, or process such data according to regulations.

Parents or legal guardians may contact EditBox via official support channels to submit related requests.

12. UPDATES TO PRIVACY POLICY

EditBox may update this Privacy Policy to reflect changes in website functionality, data processing practices, service providers, or legal regulations.

Updated content will be published on the website along with the effective date of the new version.

For material changes affecting rights or personal data processing methods, EditBox will provide notice and obtain fresh consent where required by law.

Continued use of the website does not automatically substitute for explicit consent in cases where the law requires proactive user approval.

13. PRIVACY CONTACT

If you have questions regarding this Privacy Policy, wish to update account information, request data erasure, or report privacy concerns, please contact EditBox via official support channels.

Website: https://editbox.store

Users can utilize the contact support button, Telegram, or Zalo linked directly on the EditBox website.

When submitting an inquiry, please provide necessary information for EditBox to verify and assist. Do not send passwords, OTP codes, or sensitive financial data.

To prevent spoofing and fraud, only use contact channels officially published directly on the EditBox website.

Telegram: Official Telegram
Zalo: Official Zalo
Support Email: [email protected]

EditBox — Elevating creativity.