Effective date: April 7, 2026 — Last updated: June 20, 2026
Startup Europe India Network Limited ("Company", "we", "us", "our") operates the Joebox desktop application ("Software", "App") and the website joebox.app ("Website"). This Privacy Policy explains what data we collect, why, and how we protect it.
The short version: Joebox is built on a privacy-first architecture. The Software runs entirely on your device. We do not collect, access, store, or transmit your account credentials, session data, messages, browsing activity, or personal content. Period.
To be absolutely clear, Joebox does not collect:
The Software contains zero telemetry, zero tracking, and zero analytics. We have no analytics SDK, no tracking pixels, no behavioral event logging, and no phone-home mechanisms beyond setup email submission, license validation, crash reporting, and update checks.
We collect only the minimum data necessary to operate the service:
| Data | Purpose | Stored Where | Retention |
|---|---|---|---|
| Setup email address | Finish first-run setup and product communication | Joebox API + locally on your device | Until deletion is requested |
| Transaction ID | Validate your Pro license | Locally on your device + Joebox API/Paddle | Until you deactivate |
| App version and platform | License validation and compatibility support | Joebox API | Operational logs and aggregate records |
| Email address provided at purchase | License delivery, billing, support | Paddle + Joebox API | Per Paddle's policy and our support needs |
| Payment information | Process purchases | Paddle | Per Paddle's retention policies |
When you activate a Pro license, the Software sends your transaction ID, app version, and platform to Joebox's license API, which validates purchases with Paddle server-side. This check recurs approximately every 7 days. No account content is transmitted. If validation fails because you are offline, a grace period allows continued offline use.
The Software checks for updates via Joebox's release feed hosted on Cloudflare R2. This check sends a standard HTTP request which may include your IP address in server logs. No account content or usage information is transmitted.
If you opt in, crash reports may be sent via Sentry to help us diagnose and fix bugs. Crash reports contain technical stack traces and system information (OS version, app version). They do not contain account data, messages, or personal content. Crash reporting is opt-in only and can be disabled at any time.
Joebox stores the following data locally in an SQLite database on your device:
This data never leaves your device. It is not backed up to any cloud service. It is not accessible to us. You can delete all local data by uninstalling Joebox or removing its application data folder.
When you use Joebox to access third-party services (WhatsApp, Gmail, Slack, etc.), those services may collect data according to their own privacy policies. Joebox acts as a browser container — it does not intercept, modify, inspect, or relay any data between you and those services.
| Provider | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Paddle | Payment processing, license validation | Email, payment info, transaction ID | paddle.com/privacy |
| Cloudflare R2 | Software distribution, auto-updates | IP address (in server logs) | cloudflare.com/privacy |
| Sentry | Crash reporting in production builds | Stack traces, OS/app version | sentry.io/privacy |
| Cloudflare | Website hosting, CDN | IP address, standard web request data | cloudflare.com/privacy |
The joebox.app website is a static site hosted on Cloudflare Pages. We do not use:
Cloudflare may collect basic web analytics (page views, country-level location) in aggregate. See our Cookie Policy for details on cookies.
Joebox is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us (e.g., via a purchase), contact us at support@joebox.app and we will promptly delete it.
Depending on your jurisdiction, you may have the following rights:
Since we collect very little personal data, many billing-related rights apply to data held by Paddle. You can manage billing data through Paddle's customer tools, or contact us and we'll assist.
To exercise any of these rights, email us at support@joebox.app. We will respond within 30 days.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. You have the right to know, delete, and opt-out. Contact us to exercise these rights.
Our lawful bases for processing are: (a) contract performance (license validation, billing); (b) legitimate interest (security, fraud prevention); and (c) consent (crash reporting). Our company is registered in Ireland. You have the right to lodge a complaint with the Irish Data Protection Commission (DPC) or your local supervisory authority.
In the unlikely event of a data breach affecting your personal information, we will notify affected users via email (if we have it) and post a notice on our website within 72 hours of becoming aware of the breach, as required by GDPR.
Paddle, Cloudflare, Resend, and Sentry may process data outside your country. If you are located outside those processing regions, your setup, billing, support, or crash-report data may be transferred internationally under Standard Contractual Clauses or other legally approved mechanisms.
We may update this Privacy Policy from time to time. Material changes will be communicated via the Website. The "Last updated" date at the top reflects the most recent revision. Your continued use of the Software after changes constitutes acceptance.
For any privacy-related questions, requests, or concerns:
Startup Europe India Network Limited
Data Protection Contact: support@joebox.app
Website: joebox.app