Effective date: 16 May 2018
What kinds of information do we collect?
Information you and others provide. We may collect the following kinds of information from and about you:
the content and other information you provide when you use our Services, including when you sign up for an account, make a purchase, visit our website or sign up for one of our email lists. This can include information in or about the content you provide, such as the date a file was created. We also collect information about how you use our Services, such as the types of content you view or engage with or the frequency and duration of your activities;
contact information, such as full name and email address and any contact information relating to other users (such as telephone numbers or email addresses) that you choose to upload, sync or import (such as from your personal Echobox Account or information we collect when you purchase one of our products);
communications and information that other people provide when they use the Services. This can include information about you, such as when others purchase a product on your behalf as a gift for you, and in the process provide us with your information;
the content of all communications on or through the Services, including emails and chat messages to our team for any purpose;
user communications, feedback, suggestions and ideas sent to us or any other information that you provide to us when you or someone else contacts or engages us for support regarding the Services;
any other information you choose to upload, share with other users or provide to us directly through the Services.
How we treat information that we collect from companies we partner with:
Information from third-party partners. We may also receive information from our third-party partners about you and your activities on and off Echobox, such as information from a partner when we jointly offer services to you.
Device information/Location. We may collect information from or about the computers, phones or other devices where you install or access our Services, including but not limited to device locations (including specific geographic locations), such as through GPS, Bluetooth, or WiFi signals. We may associate or link the information we collect from your different devices, which helps us to provide the Services consistently across your devices.
Log and cookie data. We automatically collect certain information provided by your browser or operating system through the Services, such as your Internet protocol (IP) address and other browser or device identifiers, browser type, operating system, crash data, Internet service provider, pages that you visit before and after using the Services, the date and time of your visit, information about your activities and actions (such as the links that you click and pages that you view) within the Services and other standard server log information ("Log and Cookie Data").
Your browser or device may offer settings related to these technologies. For more information about whether these settings are available, what they do and how they work, visit your browser or device's help material. We may not recognize or respond to browser or device signals around tracking, and some settings may interfere with your use of features that we offer. Additionally, the settings offered by a browser or device often only apply to that particular browser or device.
How do we use the information we collect?
Echobox will use the information that we collect to provide, develop, improve and monetize our Services. Examples of such use include:
communicating with users regarding their use of the Services;
enhancing and promoting the security, integrity and safety of the Services for you and other users;
operating, maintaining and improving the systems and infrastructure that provide the Services.
personalizing and customizing your experiences as part of our provision of the Services including presenting you with content, communications, or topics (including paid content) that you may be interested in or we feel may be appropriate to provide you with;
developing new tools, products or services that we may introduce which may develop and enrich your experience over time;
sending you marketing communications, communicating with you about our Services and letting you know about our policies and terms. We also use your information to respond to you when you contact us;
associating activity on our Services and the Echobox Services across different devices operated or used by the same individual to improve the Services which we provide; and
conducting data and system analytics, including research to improve the Services.
How is this information shared?
We may share the information we collect in the following circumstances:
to any business or individual whom you have chosen to give us permission to share your information with (such as in a cooperative marketing campaign where you have opted in to be contacted by more than just our company);
to third-party service providers who may assist in providing the Services or part of the Services. In this situation, any information collected by these third-party services will then be bound by the terms and conditions of that new company, and Echobox will no longer assume responsibility for the treatment of this information once it leaves control of Echobox;
to third-party apps, websites or other services that you can connect to through the Services. In this situation, any information collected by these third-party services will then be bound by the terms and conditions of that new company, and Echobox will no longer assume responsibility for the treatment of this information once it leaves control of Echobox;
in connection with a substantial corporate transaction, such as the sale of our Services, a merger, consolidation, asset sale or in the unlikely event of bankruptcy or insolvency or if the ownership or control of all or part of our Services or their assets changes, we may transfer your information to the new owner;
to help verify accounts and activity, and to promote safety and security on and off our Services and Echobox Services, such as by investigating suspicious activity or violations of our terms or policies;
in accordance with any requirements as directed by legal authorities and bound by the law of the land; and
as otherwise directed or authorized by you.
We may also share the information we collect with third-party partners and customers who help us to provide and improve our Services or other Echobox Services or who use our advertising or related products. We will not share information that personally identifies you (personally identifiable information is information like name or email address that can by itself be used to contact you or identifies who you are) with advertising, measurement or analytics partners unless you give us permission. We may provide these partners with information about the reach and effectiveness of their advertising without providing information that personally identifies you, or if we have aggregated the information so that it does not personally identify you.
Legal requests. We may access, preserve and share your information in response to a legal request (like a search warrant, court order or subpoena) if we have a good faith belief that the law requires us to do so. This may include responding to legal requests when we have a good faith belief that the response is required by law in that jurisdiction, affects users in that jurisdiction, and is consistent with internationally recognized standards. We may also access, preserve and share information when we have a good faith belief it is necessary to: detect, prevent and address fraud and other illegal activity; to protect ourselves, you and others, including as part of investigations; or to prevent death or imminent bodily harm. For example, we may provide information to third-party partners about the reliability of your account to prevent fraud and abuse on and off our Services. Information we receive about you may be accessed, processed and retained for an extended period of time when it is the subject of a legal request or obligation, governmental investigation, or investigations concerning possible violations of our terms or policies, or otherwise to prevent harm. We also may retain information from accounts disabled for violations of our terms for at least a year to prevent repeat abuse or other violations of our terms.
Aggregate or de-identified data. We may also disclose information that has been aggregated or that otherwise does not personally identify you to third parties and affiliates who may, amongst other purposes, use it for analytics, trends and analysis to improve and provide our products and services and the products and services provided by our third-party partners.
What is our legal basis for processing data?
We collect, use and share the data that we have in the ways described above:
as necessary to fulfill our Terms of Service;
as necessary to comply with our legal obligations; and
as necessary for our (or others') legitimate interests, including our interests in providing an innovative, personalised, safe and profitable Service to our users and partners, unless those interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data.
How can you exercise your rights provided under the GDPR?
Under the General Data Protection Regulation, you have the right to access, rectify, port and erase your data, as well as the right to restrict and object to certain processing of your data. This includes:
where you have agreed to direct marketing, the right to object to our processing of your data for that purpose, which you can exercise by using the "unsubscribe" link in such marketing communications; and
the right to object to our processing of your data where we are pursuing our legitimate interests or those of a third party which you can exercise by requesting us to delete your account at any time.
Data Retention, account deactivation and deletion
We store data until it is no longer necessary to provide our Services or until your account is deleted – whichever comes first. This is a case-by-case determination that depends on things such as the nature of the data, why it is collected and processed, and relevant legal or operational retention needs.
You can delete your account at any time. When you delete your account, we delete all of your content associated with that account. It may take up to 90 days to delete data stored in backup systems. Your information isn't accessible by Echobox during this time.
How do you access and modify the information we hold about you?
If you have created an account with us on one of our online services, such as Shopify, you can access your account information by following the steps listed by that specific service.
If you wish to know what information we hold about you directly, you may email us at any time by writing to email@example.com with your request. Please note that request can sometimes take up to 90 days to process in order to accurately provide you with all information available.
Safety and Security
We use the information that we have to help verify accounts and activity and to promote safety and security on and off our Services, such as by investigating suspicious activity or violations of our terms or policies. We work hard to protect your account by using teams of engineers, automated systems and advanced technology such as encryption and machine learning. For example, we may deploy automated technologies to detect abusive behavior and content, such as child pornography, that may harm our Services, you, other users, or others. Some aspects of the Services may contain links to content maintained by third parties that we do not control. We are not responsible for the privacy practices of these third parties, and we recommend that you view the privacy policies of each website that you visit.
How our global services operate
How will we notify you of changes to this policy?
How to contact Echobox with questions
9615 E County Line Rd
Centennial, CO 80112