Privacy Policy

Welcome to PieBox !

This Privacy Policy ("Policy") applies to PieBox website and related services. SPARKHUB PTE. LTD. and/or its affiliates ("we", "us" ,"our") is the service provider and operator of PieBox Services. We value and respect your privacy, and we are committed to protecting it in compliance with this Privacy Policy and applicable laws and regulations. This Policy aims to provide you ("you", "User") with an understanding of our practices concerning the collection, use, share and storage of personal information we collect from or about you when you interact with us, as well as your rights regarding the information you provide and how we safeguard those rights. By accessing and using the PieBox Services, you agree to be bound by this Policy. If you do not agree with this Policy, in whole or in part, you should not use the PieBox Services.

This policy applies to the activities of visitors (hereinafter collectively referred to as "Developers") who access, register, or log in to the platform. If you use the platform and services to create and publish Agents, applications, or workflows for use by other users within the platform or external platform users (collectively referred to as "End Users"), or integrate services within the platform into your own other applications, then you shall provide services to End Users in your own name and act as the personal information processor for End Users' personal information during this stage. You are the data controller of Content and questions about data handling processes from your users or third parties regarding Content should in the first instance be addressed to you. As your service provider, we only provide technical tools and do not intervene in your or end-users' specific business data decisions.Our relationship with you during this stage is governed by the Data Processing Agreement.

We strongly advise you to read this Policy carefully to understand our practices regarding your personal information. We also recommend visiting this Policy frequently to stay informed of any updates. If you have any questions, please feel free to contact us at contact@piebox.me.

This Policy will help you understand the following contents:

1.What Information We Collect About You

2.How We Use Your Information

3.How We Share Your Information

4.Minimum Age Requirements for Our Sites and Services

5.Your Rights and Choices

6.Data Retention and Security

7.Third-Party Services

8.International Data Processing and Transfer

9.Update of this Policy

10.How to Contact Us

11.Supplemental Terms - Jurisdiction Specific Terms

What Information We Collect About You

We collect information about you through various means when providing the PieBox Services. Please note that certain types of information are necessary for us to provide the PieBox Services to you. If you choose not to provide us with such information or request its deletion, you may no longer be able to access or use the PieBox Services. We collect your information in the following ways:

Please note that if information cannot identify you personally, either alone or in combination with other information, and is not related to you, it does not constitute your personal information in the legal sense. When your information can identify you personally, either alone or in combination with other information, or when we combine data that cannot be linked to any specific personal information with other of your personal information, then during the period of such combination, this information will be processed and protected as your personal information in accordance with this Privacy Policy. It should be clarified that personal information does not include anonymized information.

• Information You Provide Directly:
• Account Information. You can use your third-party account (such as your Google account) to register and log in, we collect information from that connected account to complete your registration, this may includes your profile picture, email address or phone number.
• Payment Information. If you purchase a paid subscription from PieBox, we will collect payment information from you that may include your name, billing address and credit card or bank information. We may also use your credit card information to verify your identity and prevent abuse. We do not directly process or store your entire credit card number, but we do direct that information to our third-party payment processors for processing.
• Inputs and Outputs. You are able to interact with our Services in a variety of formats, including but not limited to chat, coding, and agentic sessions ("Prompts" or "Inputs"), which generate responses and actions (“Outputs”) based on your Inputs. This includes third-party applications you choose to integrate with our Services. If you include personal data or reference external content in your Inputs, we will collect that information and this information may be reproduced in your Outputs.
• User Content and File Information. We collect your website information that you upload, post, deliver, or otherwise provide to the Service, such as source code, text, photographs, document, or other files including videos or recordings, Git information, and other files that you provide us. In addition, to provide the corresponding services, PieBox needs to collect the content you upload/input, operation and interaction records, as well as the agents, workflow templates, web/mobile applications and skill information created/published using the aforementioned functions.
• User Inquiries, Reports, and Troubleshooting Information. We may collect user inquiry records, report records, and troubleshooting process records (such as communication or call records) generated from your use of PieBox and related services. We will record and analyze this information to respond to your help requests more promptly and to improve our services.
• Any Information You Voluntarily Provide to Us.
• Information We Collect Automatically:

When you use the Services, we also receive certain technical data automatically (described below, collectively “Technical Information”). This includes:

• Device and Connection Information. Consistent with your device or browser permissions, your device or browser automatically sends us information about when and how you install, access, or use our Services. This includes information such as your device type, operating system information, browser information and web page referers, mobile network, connection information, mobile operator or internet service provider (ISP), time zone setting, IP address (including information about the location of the device derived from your IP address), identifiers (including device or advertising identifiers, probabilistic identifiers, and other unique personal or online identifiers), and device location.
• Usage Information. We collect information about your use of the Services, such as the dates and times of access, browsing history, search, information about the links you click, pages you view, and other information about how you use the Services, and technology on the devices you use to access the Services.
• Log and Troubleshooting Information. We collect information about how our Services are performing when you use them. This information includes log files. If you or your device experiences an error, we may collect information about the error, the time the error occurred, the feature being used, the state of the application when the error occurred, and any communications or content provided at the time the error occurred.
• Cookies & Similar Technologies. We and our service providers use cookies, scripts, or similar technologies (“Cookies”) to manage the Services and to collect information about you and your use of the Services. These technologies help us to recognize you, customize or personalize your experience, market additional products or services to you, and analyze the use of our Services to make them safer and more useful to you.
• Information We Obtain from Other Sources:
• Vendors and Partners: To provide you with better or more efficient services, or to jointly provide services for you, or to prevent internet fraud, our affiliates and partners may share your personal information with us in accordance with legal requirements, agreements with you, or with your consent. We will protect the security of your personal information using industry-standard methods and making our best commercial efforts, as required by relevant laws and regulations and/or as necessary for the identity authentication function.
• Other methods. We may also use other methods to collect additional information about you, your device, or your use of the services. We will explain these methods to you at the time of collection and obtain your consent if required by applicable laws.

Please note that we are not responsible for the privacy practices of our service providers and business partners, and their information practices are not covered by this Policy. We may aggregate or de-identify the information described above, and such aggregated or de-identified data is not subject to this Policy.

How We Use Your Information

We use the information we collect from you to ensure the operation, maintenance, enhancement, and development of all features, functionality, and services offered on PieBox Services. Here is an overview of how we use your information:

• Security and Fraud Prevention. We use your information to provide security for our websites, products, software, and applications. This includes preventing fraud and abuse.
• Service Provision and Support. We use your information to fulfill your requests for services, support, and information. This includes internal operations such as troubleshooting, testing, research, statistical analysis, data analysis, and soliciting your feedback.
• Improving and Developing PieBox Services. We use your information to improve and develop PieBox Services, ensuring that we continue to enhance the platform based on user feedback and needs.
• Communication and Feedback. We use your information to communicate with you and respond to your feedback. This enables us to address your inquiries, provide support, and keep you informed about updates and developments.
• Enforcement of Policies. We utilize your information to enforce our Terms of Service and other policies to maintain a safe and positive environment for all users.
• Sales and User Support. We use your information to facilitate sales, promotions, and purchases of goods and services on PieBox Services.

In certain cases, we may seek your consent to process your personal information for specific purposes. If you provide consent, you can withdraw it at any time, and we will cease processing your data for that purpose.

Please understand that as our business develops, the functions or services we provide may be adjusted or changed. In principle, when new functions or services are related to our current functions or services, the personal information collected and used will be directly or reasonably related to the original processing purpose. In scenarios where the personal information is not directly or reasonably related to the original processing purpose, we will collect and use your personal information again, in accordance with the requirements of laws, regulations, and national standards, through page prompts, interactive processes, and agreement confirmation methods, and obtain your consent.

How We Share Your Information

PieBox does not sell your personal information to third parties. We only disclose information on a need-to-know basis where appropriate safeguards and contractual arrangements are in place and as described below.

3.1 Delegation to Affiliates

We may delegate the processing of your personal information to our affiliates to fulfill the purposes described in this Policy. Such delegation will be within the scope of the purposes described, and we ensure that our affiliates comply with the provisions of this Policy regarding the retention of personal information.

3.2 Service Providers and Business Partners

We may share certain information with service providers and business partners to assist us in performing business operations and for business purposes. These parties may include website hosting providers, database maintenance providers, data storage and security service providers, payment processors, transaction fulfillment providers, advertising and marketing vendors, and others. We enter into Data Processing Agreement with these parties to ensure they process your information in compliance with this Policy, limit its use to the purposes for which it is provided, and implement reasonable confidentiality and security measures.

These service providers are authorized to use your information only as necessary to provide Services to PieBox. We may use and disclose aggregate information that does not identify or otherwise relate to an individual for any purpose unless we are prohibited from doing so under applicable law.

3.3 Corporate Transactions

In the event of a substantial corporate transaction such as the sale of a website, merger, consolidation, asset sales, or bankruptcy, we may share all the information we collect.

3.4 Legal Compliance and Protection

We may disclose your information when required by law, subpoena, or other legal process, or when we have a good faith belief that disclosure is reasonably necessary to investigate, prevent, or take action regarding suspected or actual illegal activities, assist government enforcement agencies, enforce our agreements with you, investigate and defend against third-party claims or allegations, protect the security or integrity of our services, or exercise or protect the rights and safety of PieBox, our users, personnel, or others. We strive to notify users about legal demands for their personal information unless prohibited by law or court order, or in case of emergencies. We may choose to challenge such demands when we believe they are overbroad, vague, lack proper authority, but we do not guarantee to challenge every demand.

3.5 Consent and Third-Party Services

We partner with third-party services (e.g., Google) to provide sign-up, log-in, and content-sharing experiences. If you choose to use these features, we may share information about you with these Third-Party Services. Depending on the permissions you grant, these Third-Party Service may access your account information and other information you choose to provide. When engaging in public activities on PieBox, be cautious about disclosing personal information, as it may be read, collected, or used by other users. PieBox is not responsible for the information you choose to submit in such cases.

We may disclose your information with other third parties with your consent.

Minimum Age Requirements for Our Sites and Services

The Sites and Services are not directed or intended for use by individuals under the age of 18 (or meet the minimum age requirement for using this service in your region, whichever is higher). We do not knowingly collect personal information from anyone under the age of 18. If you are a parent or guardian and you become aware that your child has provided us with personal information, please contact us.

If we discover that a minor under the age of 18 has provided us with personal information in violation of applicable laws, we will delete the information collected and terminate the minor's account, unless we are legally obligated to retain such information.

Your Rights and Choices

5.1 Your Rights Relating to Your Personal Data

Depending on where you live and the laws that apply in your country of residence, you may enjoy certain rights regarding your personal data, as described further below. However, please be aware that these rights are limited, and that the process by which we may need to action your requests regarding our training dataset are complex. We may also decline a request if we have a lawful reason for doing so. That said, we strive to prioritize the protection of personal data, and comply with all applicable privacy laws.

To exercise your rights, you or an authorized agent may submit a request by emailing us at contact@piebox.me. After we receive your request, we may verify it by requesting information sufficient to confirm your identity. You may also have the right to appeal requests that we deny. PieBox will not discriminate based on the exercising of privacy rights you may have. Set out below is a summary of the rights which you may enjoy, depending on the laws that apply in your country of residence.

• Right to Know: The right to know what personal data PieBox processes about you, including the categories of personal data, the categories of sources from which it is collected, the business or commercial purposes for collection, and the categories of third parties to whom we disclose it.
• Access & Data Portability: The right to request a copy of the personal data PieBox processes about you, subject to certain exceptions and conditions. In certain cases and subject to applicable law, you have the right to port your information.
• Deletion: The right to request that we delete personal data collected from you when you use our Services, subject to certain exceptions. You also are able to delete individual conversations, which will be removed immediately from your conversation history and automatically deleted from our back-end within 15 days.
• Correction: The right to request that we correct inaccurate personal data PieBox retains about you, subject to certain exceptions. Please note that we cannot guarantee the factual accuracy of Outputs. If Outputs contain factually inaccurate personal data relating to you, you can submit a correction request and we will make a reasonable effort to correct this information—but due to the technical complexity of our large language models, it may not always be possible for us to do so.
• Objection: The right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims. If we use your information for direct marketing, you can object and opt out of future direct marketing messages using the unsubscribe link in such communications.
• Restriction: The right to restrict our processing of your personal data in certain circumstances.
• Withdrawal of Consent: Where PieBox’s processing of your personal data is based on consent, you have the right to withdraw your consent. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
• Automated Decision-Making: PieBox does not engage in decision making based solely on automated processing or profiling in a manner which produces a legal effect (i.e., impacts your legal rights) or significantly affects you in a similar way (e.g., significantly affects your financial circumstances or ability to access essential goods or services).

5.2 This Privacy Notice does not apply to:

• Any information that You process to provide their services to End Users. You are solely responsible for ensuring compliance with all applicable laws and regulations with respect to their End Users, including notifying their End Users of their personal information collection, use, and disclosure under their own terms of service and privacy policies. If your personal information is contained in Customer Content and you have any questions about the specific settings and privacy practices the relevant Customer has made to share your personal information with us, please contact the relevant Customer directly or review their privacy notice.
• Third-party products, services, businesses, or any software accessible via the Service or that integrates with the Service. If you have any questions about the specific settings and privacy practices of such third parties, please contact the relevant third-party product, service, or business to review its privacy notice.

Data Retention and Security

6.1 Data Retention

We retain your information for the minimum necessary period to fulfill our legal and contractual obligations, develop our Sites and Services, resolve disputes, enforce our rights, for legitimate business purposes, such as tax or accounting requirements, as described in this Notice and as recommended by industry standards.

When we no longer have an ongoing legitimate business need to process your information, we will either delete or anonymize it. When we choose to anonymize information, we strive to make sure that the information cannot be linked back to you or any specific user. If deletion is not possible (e.g., backups), we will store it securely.

6.2 Data Security

We attach great importance to the security of user information and will strive to take reasonable security measures (including technical and managerial aspects) to protect your information and prevent it from being misused or accessed, disclosed, used, modified, damaged, lost, or leaked without authorization. We will use reasonable and feasible means such as encryption technology and anonymization processing that are no less advanced than those commonly used in the industry to protect your information, and will use security protection mechanisms to minimize the possibility of your information being maliciously attacked.

We will establish a dedicated security department, security management system, and data security processes to ensure the security of your information. We adopt strict data usage and access systems to ensure that only authorized personnel can access your information, and will conduct security audits of data and technology in a timely manner in accordance with relevant internal management systems.

Although we have taken the above reasonable and effective measures and complied with the standards required by relevant laws and regulations, please understand that due to technological limitations and the possibility of various malicious attacks, it is impossible to guarantee 100% security of information in the internet industry, even with the strongest security measures. We will do our best to ensure the security of the information you provide to us. You acknowledge and understand that the systems and communication networks you use to access our services may experience problems due to factors beyond our control. Therefore, we strongly recommend that you take proactive measures to protect the security of your user information, including but not limited to using complex passwords, changing your passwords regularly, and not disclosing your account passwords to others.

We will develop emergency response plans and immediately activate them in the event of a user information security incident to prevent the escalation of its impact and consequences. Once a user information security incident (leakage, loss, etc.) occurs, we will promptly inform you, in accordance with legal requirements, of: the basic situation and potential impact of the security incident, the measures we have taken or will take, suggestions for your self-protection and risk reduction, and remedial measures for you. We will promptly inform you of the relevant circumstances of the incident via push notifications, emails, letters, or SMS. If it is difficult to notify each individual, we will issue a public announcement in a reasonable and effective manner. Simultaneously, we will also report the handling of user information security incidents to relevant regulatory authorities as required.

We hereby specifically remind you that the user information protection measures provided in this Privacy Policy only apply to the platform and related services. Once you leave the platform and related services and browse or use other websites, products, services and content resources, we have no ability or obligation to protect any information you submit on software or websites outside the platform and related services, regardless of whether your login, browsing or use of the aforementioned software or websites is based on links or guidance from the platform.

If you have any questions about the security of our Sites and Services, please feel free contact us at contact@piebox.me.

Third-Party Services

Our Sites and Services may contain links to or integrations with other websites or applications not operated or controlled by PieBox ("Third-Party Services"). Certain Third-Party Services used to navigate to and from our Sites and Services have separate user terms and privacy notices that are independent of this Notice. We are not responsible for the content, accuracy, or opinions expressed in such Third-Party Services. We do not monitor or check these Third-Party Services for accuracy or completeness. We recommend carefully reviewing the terms and privacy notices of each Third-Party Service prior to use in alignment with your specific compliance, privacy, and security requirements.

International Data Processing and Transfer

To provide our Sites and Services, PieBox may store, process and transmit your information outside of your country of residence, which may have different data protection laws and may not offer the same level of protection or guarantees as in your country or the country where you initially provided the information. We ensure that all transfers comply with applicable laws using appropriate safeguards, such as:

• Adequacy Decisions: Transferring data to countries recognized as providing an adequate level of data protection by relevant authorities (e.g., the European Commission for EEA users).
• Standard Contractual Clauses: Using approved contractual protections for transfers where adequacy decisions do not apply.
• User Consent: Obtaining your explicit consent where required by law.

We take appropriate measures to ensure recipients protect your information in line with this Policy and applicable laws. For more details, refer to the "Supplemental Terms - Jurisdiction Specific Terms" section.

Update of this Policy

We reserve the right to periodically update or modify this Policy to reflect changes in our business, technology, and relevant laws and practices. Whenever we make updates to the Policy, we will notify you by updating the "Last Updated" date at the top of the revised Policy, or providing any other notice as required by applicable law. We strongly recommend that you review the Policy each time you visit PieBox to stay informed about our current privacy practices .

How to Contact Us

If you have any comments, questions, concerns or requests regarding this Policy or our practices related to the protection of personal information, please feel free to contact us at contact@piebox.me. To ensure a prompt and efficient response, please label your email subject line as "PieBox Privacy Policy request." Our Data Specialist is responsible for overseeing and implementing our personal information protection strategy, as well as ensuring compliance with applicable laws and regulations. We will make every effort to review your requests promptly, verify your user identity, and respond within the timeframe required by any applicable law. If your request involves complex or significant issues, we may require additional information.

Supplemental Terms - Jurisdiction Specific Terms

European Economic Area ("EEA"), Switzerland, and UK If you are using the services in the EEA, Switzerland or the UK (the "European Region"), the following additional terms apply:

Legal Bases for Processing

We use your personal data only as permitted by law. Our legal bases for processing your personal data described in this policy are described in the table below.

（1）Personal Information Categories：

Account Information

User Content

Communication Information

Device and Usage Information

Log Data

• Purpose of processing：

To create and manage your account, provide a seamless and convenient login experience, and enable you to interact with our services, such as engaging in conversations and accessing various features.

• Legal bases：

Where necessary to perform a contract with you when we provide and maintain our services.

Your consent when we ask for it to process your personal data for a specific purpose to help you create accounts.

Where necessary for our legitimate interests: If you're under 18, your ability to enter into a binding contract is restricted. In such cases, where we may not be able to process your information based on contractual necessity, we rely on legitimate interests. We use the information we collect to enable you to access and use the platform.

（2）Personal information Categories：

User Content

Communication Information

Device and Usage Information

Log Data

• Purpose of processing：

To identify areas for improvement, develop new features, and enhance the overall user experience.

• Legal bases：

Where necessary to pursue our legitimate interests in identifying and resolving issues with the platform and enhancing its functionality; and to conduct research and safeguard personal data through aggregation or anonymization, in line with the principles of data minimization and privacy by design.

Your consent when we ask for it to process your personal data for a specific purpose to provide services.

（3）Personal Information Categories：

Account Information

Communication Information

Device and Usage Information

• Purpose of processing：

To inform you of changes to our services, provide customer support, or send you other service-related messages.

• Legal bases：

Where necessary to perform a contract with you when we provide and maintain our services.

Your consent when we ask for it to process your personal data for a specific purpose to communicate with you.

（4）Personal Information Categories：

Account Information

User Content

Communication Information

Device and Usage Information

Log Data

Cookies & Similar Technologies

• Purpose of processing：

To comply with our legal obligations, or as necessary to perform tasks in the public interest, or to protect the vital interests of our users and other people. This could include providing law enforcement agencies or emergency services with information in urgent situations to protect health or life.

• Legal bases：

Where necessary to comply with a legal obligation: This applies in situations where we are required to take steps to ensure the safety of our users, or to comply with a valid legal request, such as an order from law enforcement agencies or courts. It also applies when we are fulfilling our obligations under applicable laws, or when we are protecting the rights, safety, or property of ourselves, our affiliates, our users, or third parties.

Where necessary for our legitimate interests to protect our business, employees, and users from illegal activities, inappropriate conduct, or breaches of terms that could cause harm, and to disclose and share information with regulators or other government authorities.

（5）Personal information Categories：

Account Information

User Content

Communication Information

Device and Usage Information

Log Data

Cookies & Similar Technologies

• Purpose of processing：

To detect and prevent fraudulent activities, abuse, and other security threats. This helps us maintain the integrity and stability of our platform.

• Legal bases：

Where necessary to comply with a legal obligation when we use your personal data to comply with applicable law or when we protect our or our affiliates', users', or third parties' rights, safety, and property.

Where necessary for our legitimate interests to ensure that the Platform is safe and secure.

Data Storage

It is important to note that our servers are situated in Singapore or other locations as applicable. Consequently, when you utilize our services, your personal data may be processed and stored on our servers located in Singapore or other locations as applicable. This could involve either a direct submission of your personal data to us or a transfer of your data conducted by us or a third-party.

Your Rights

You have the following rights:

• The right to request free of charge (i) confirmation of whether we process your personal data and (ii) access to a copy of the personal data retained;
• The right to request proper rectification or erasure of your personal data or restriction of the processing of your personal data;
• Where processing of your personal data is either based on your consent or necessary for the performance of a contract with you and processing is carried out by automated means, the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to have your personal data transmitted directly to another company, where technically feasible (data portability);
• Where the processing of your personal data is based on your consent, the right to withdraw your consent at any time (withdrawal will not impact the lawfulness of data processing activities that have taken place before such withdrawal);
• The right not to be subject to any automatic individual decisions, including profiling, which produces legal effects on you or similarly significantly affects you unless we have your consent, this is authorised by European Union or Member State law or this is necessary for the performance of a contract;
• The right to object to processing if we are processing your personal data on the basis of our legitimate interest unless we can demonstrate compelling legitimate grounds which may override your right. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your personal data and to balance our legitimate interest in processing and your objection to this processing;
• The right to request the restriction of the processing of your information where (i) you are challenging the accuracy of the information, (ii) the information has been unlawfully processed, but you are opposing the deletion of that information, (iii) you need the information to be retained for the pursuit or defense of a legal claim, or (iv) you have objected to the processing and you are awaiting the outcome of that objection request;
• The right to object to processing your personal data for direct marketing purposes; and
• The right to lodge complaints before your local data protection authority.

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Please contact us if you would like to exercise any of your rights.