This Privacy Policy explains what personal data Khush Technologies, trading as EvoSeedbox (“EvoSeedbox”, “we”, “us”), collects when you visit evoseedbox.com, use the client area at client.evoseedbox.com or use our hosting services, why we collect it, and the choices you have. We are the data controller for this information.
Summary
- We collect what we need to run your account, bill you and keep the platform secure.
- We do not sell personal data and we do not use it for third-party advertising.
- We do not look at the files stored in your account except to investigate a complaint, a security incident or a breach of our terms.
- Card and wallet payments are handled by our payment providers; we never see or store full card numbers.
Information we collect
Account and billing details
When you order a service we collect your name, email address, postal address, country, and, if you give it, phone number and company name. We keep a record of your orders, invoices, payments, refunds and account credit.
Payment information
Payments are processed by Stripe, PayPal and, for customers in India, UPI payment providers. They receive the payment details you enter and return a transaction reference and, for saved cards, a token with the card brand, last four digits and expiry date. We do not receive or store full card numbers or security codes.
Service and technical data
To provide and protect the Service we record your account username, the server your account is on, the applications you install, storage and traffic usage, and the IP addresses and times of logins to the client area, dashboard and file-transfer services. Our servers keep standard security logs, including failed login attempts, which are used to block attacks.
Support conversations
When you open a ticket or email us we keep the conversation and any information you include, so we can help you and refer back to it later.
Website visits
When you visit our website our servers and our content delivery network record standard request data such as IP address, browser type, the page requested and the time. We use it to deliver pages, measure performance and stop abuse.
Content in your account
Files and application data you store on your account belong to you. We process them only to store and serve them as you instruct, and we do not inspect, analyse or share them, except where required to investigate a valid complaint or legal order or to protect the security of our systems.
How we use your information
- to create, provision and manage your services;
- to bill you, process payments and refunds and prevent payment fraud;
- to answer support requests;
- to send service messages such as order confirmations, invoices, maintenance notices and security alerts;
- to detect and stop abuse, attacks and breaches of our Terms of Service and Acceptable Use Policy;
- to meet our legal, tax and accounting obligations.
We send marketing emails only where you have agreed to receive them, and every such email lets you opt out.
Legal bases (EEA and UK)
We process your data because it is necessary to perform our contract with you (providing and billing the Service), because we have a legitimate interest in keeping the Service secure and improving it, because the law requires it (for example tax records), or because you have given consent (for example to marketing emails), which you can withdraw at any time.
Who we share it with
We share personal data only with service providers that help us run the Service, under agreements that require them to protect it, and only as far as they need it:
- Payment providers — Stripe, PayPal and UPI payment providers, to take payments and refunds;
- Infrastructure providers — the data centres and hosting companies where our servers are located, and Cloudflare, which delivers and protects our website;
- Communication tools — the email delivery and support systems we use to send you service messages;
- Review platforms — if you choose to leave a review on Trustpilot after we invite you, Trustpilot processes it under its own policy.
We also disclose information where we are legally required to, for example in response to a valid court order, or where necessary to establish or defend legal claims. If our business is sold or transferred, customer data may pass to the new owner, who must continue to honour this policy.
Where your data is stored
All of our hosting servers are located in the Netherlands, in the data centre of our hosting partner there, and customer accounts and their files are stored only on those servers. Our website and client area are hosted in the European Union. We process personal data in line with the EU General Data Protection Regulation (GDPR) and Dutch law. Some of our service providers, such as our payment providers and Cloudflare, process data in other countries, including the United States. Where data leaves the European Economic Area we rely on appropriate safeguards such as the European Commission’s standard contractual clauses.
How long we keep it
- Account and support records — while your account is open, and for a reasonable period afterwards in case of questions, disputes or a returning customer.
- Invoices and payment records — for as long as tax and accounting laws require.
- Server and security logs — for a limited period, then deleted or rotated automatically.
- Files in your account — until you delete them or your service ends. We do not keep backups of customer accounts, and data of ended services is removed from our servers.
Security
Every customer account is isolated from other accounts on the same server. The website, client area and dashboards are served over encrypted connections, access to our systems is restricted to staff who need it, and our servers are monitored around the clock. No system is perfectly secure, so please use a strong, unique password for your account.
Your rights
Depending on where you live you may have the right to access the personal data we hold about you, correct it, delete it, receive a copy in a portable format, object to or restrict certain processing, and withdraw consent. You can update most details yourself in the client area. For anything else, email [email protected] from the address on your account and we will respond within 30 days. We may need to keep some records, such as invoices, where the law requires it.
If you are in the EEA or UK and believe we have not handled your data properly, you can also complain to your local data protection authority or to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). California residents have the rights to know, delete and not be discriminated against for exercising privacy rights; we do not sell or share personal information for cross-context behavioural advertising.
Cookies
We use cookies that are needed to run the website and client area, such as login sessions, language preference and security checks. See our Cookie Policy for details.
Children
The Service is not intended for anyone under 18 and we do not knowingly collect data from children.
Changes to this policy
We may update this policy as our service or the law changes. The current version is always on this page with the date of the last change, and we tell customers about significant changes by email or in the client area.
Contact
Khush Technologies, trading as EvoSeedbox
Privacy questions and requests: [email protected]
Client area: client.evoseedbox.com
