Effective date: April 7, 2026. Last updated: August 26, 2026.
Startup Europe India Network Limited ("Company", "we", "us", "our") operates the Joebox desktop application ("Software", "App") and the website joebox.app ("Website"). This Privacy Policy explains what data we collect, why, and how we protect it.
Summary. Your accounts, credentials and the content you access through them remain on your device. We collect the categories of data described in this Privacy Policy, for the purposes and retention periods set out below.
Joebox does not receive or collect the following from your accounts:
We collect two limited identifiers in specific circumstances. A randomly generated installation identifier accompanies support messages, to distinguish repeat reports; it is not derived from your device or identity. The country of download is recorded when the Software is downloaded, for platform support planning. City and referring page are not recorded.
The Software incorporates no analytics service, tracking pixel or telemetry.
The Software maintains a diagnostic log on your device for fault diagnosis. It generally records hostnames rather than full web addresses, and does not record text you enter or select. An error message may contain additional address information. The log remains on your device unless you attach it to a support message.
The following categories of data are transmitted to or held on a server:
| Data | Purpose | Stored Where | Retention |
|---|---|---|---|
| Your email address, if you give it | Product updates | Joebox API | Until you unsubscribe, via the link in any email. The withdrawal is recorded, so a prior submission cannot re-add you |
| Purchase and licence information, including your email address and transaction identifier | Delivering, validating, supporting and recovering your licence | Joebox API and Paddle | Retained for as long as reasonably necessary to provide, validate and recover your licence, unless deletion is requested or a longer period is required by law |
| App version and platform | Licence validation and version support | Joebox API | Kept with the licence record |
| Payment information | Processing your payment | Paddle only. Not disclosed to us | Paddle's own policy |
| Support messages | Responding to your request | Joebox API and our email | Your words, your email and any log are erased after 6 months. A row with the date, the category and the app version is kept so we can count problem reports over time |
| A hashed form of your IP address | Short-term abuse prevention and rate limiting of the support and signup forms | Joebox API | Deleted after 2 days. The address itself is not stored |
| Download record: file, version, country, network | Platform support planning, and distinguishing users from automated crawlers | Joebox API | Browser information deleted after 90 days. Download statistics may be retained in aggregated form for longer-term analysis |
Your messages, files and credentials are not received by us.
Purchases are made from Paddle, which acts as Merchant of Record. Paddle transmits your email address and transaction identifier to us for the purpose of issuing and supporting your licence. This data is obtained from Paddle rather than from you directly. Payment details are not disclosed to us.
Licence validation repeats approximately every 7 days and transmits the transaction identifier, application version and platform. Where validation cannot complete because you are offline, a grace period permits continued use. Update checks retrieve a release feed and transmit no account data. As with any internet request, the relevant service provider may receive your IP address in the course of providing the update or download.
On a fault, the Software writes a report to your device comprising a snapshot of process state at the point of failure, together with the application version and operating system. The contents of a memory snapshot cannot be guaranteed.
No report is transmitted without your instruction. On next launch the Software asks whether to transmit the report, offering Send, Always send, Not now, and Never ask again. Declining deletes the report. A setting under Settings, General enables transmission without prompting.
When you submit a request through Get Help, we may receive the content of your message, your email address if you provide one, your application version and platform, your licence tier, and a randomly generated installation identifier used to distinguish repeat reports.
The diagnostic log may be attached. The option is not pre-selected, and its content is available for inspection beforehand. Passwords, tokens, email addresses and query strings are removed prior to transmission. Automated filtering is not exhaustive.
Joebox stores certain information locally on your device in order to function. This information is not transmitted to us as part of normal operation:
The Software does not transmit or back up this data. It resides in your application data folder and will be included in any backup you have configured for that location, such as Time Machine. We have no access to it. All local data may be deleted by uninstalling the Software or removing its application data folder.
Where the Software is used to access third-party services (WhatsApp, Gmail, Slack and others), those services process data under their own privacy policies. The Software transmits no data from those services to us. Two exceptions arise only where you initiate them: a diagnostic log attached to a support message (section 2c) and a crash report (section 2b).
The Software operates as a browser container, running each service in an isolated session. To provide that functionality it processes certain information locally on your device. This may include cookies and session data, page titles, unread counts, notifications and their previews, site status, link addresses and site icons.
This information is processed locally and is not transmitted to us as part of normal operation. Joebox uses the security mechanisms made available by your operating system to protect locally stored session information. See our Cookie Policy for how cookies in particular are handled.
| Provider | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Paddle (Merchant of Record) | Processes purchases and acts as Merchant of Record for transactions. Paddle processes payment and transaction information and handles applicable taxes | Email, payment info, transaction ID | paddle.com/privacy |
| Cloudflare R2 | Software distribution, auto-updates | IP address (in server logs) | cloudflare.com/privacy |
| Sentry | Crash reports, and only ones you have chosen to send | Stack traces, OS and app version. Nothing at all unless you switch crash reporting on | sentry.io/privacy |
| Cloudflare | Website hosting, CDN | IP address, standard web request data | cloudflare.com/privacy |
| Resend | Sending your licence email and replies to support | Your email address and the message | resend.com/privacy |
The following are the main service providers and other recipients involved in operating Joebox and the services described in this Privacy Policy. Paddle's checkout functionality may process information necessary to provide and secure the purchase process, as described in Paddle's own privacy information. We do not use advertising networks or data brokers in connection with Joebox.
Depending on the service, these companies act either on our instructions or under their own legal responsibilities. Paddle acts as Merchant of Record for purchases and processes transaction data in accordance with its own legal and contractual responsibilities.
The joebox.app website is a static site hosted on Cloudflare Pages. We do not use:
Fonts are served from this site, rather than from Google. The Website uses Paddle's checkout functionality to enable purchases. See our Cookie Policy for further information about cookies and similar technologies.
Cloudflare, who host the site, keep standard server logs including IP addresses. Separately, we count downloads ourselves - see the table in section 2 for what is recorded and how long it is kept. See our Cookie Policy for cookies.
Joebox is not intended for use by children. We do not knowingly collect personal information from children. If you believe that a child has provided personal information to us, please contact us at support@joebox.app. We will take appropriate steps to delete the information, subject to any legal obligations requiring us or the relevant payment provider to retain certain information.
Depending on your jurisdiction, you may have the following rights:
Right to object. Where we process your personal data on the basis of legitimate interests, you may object to that processing by contacting us.
Since we collect very little personal data, many billing-related rights apply to data held by Paddle. You can manage billing data through Paddle's customer tools, or contact us and we'll assist.
To exercise any of these rights, email us at support@joebox.app. We will respond within the period required by applicable data protection law.
To stop product emails you do not need to write to anyone: there is a one-click link at the foot of every email we send, and we keep a record of the refusal so a form you filled in earlier cannot put you back on the list.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. You have the right to know, delete, and opt-out. Contact us to exercise these rights.
The lawful basis varies by purpose. Contract: licence details and the email address associated with a purchase, without which the licence cannot be issued. Legitimate interest: download records, for platform support planning; and support messages, for responding to requests. Consent: product emails and crash reports. You may withdraw your consent at any time.
Legitimate interest further covers the application version and platform transmitted with a licence check, for version support; and the hashed IP address used for short-term abuse prevention. You may object to processing based on legitimate interests.
Startup Europe India Network Limited is registered in England and Wales, company number 10245686. Our supervisory authority is the UK Information Commissioner's Office (ICO), and you have the right to complain to them at ico.org.uk. If you are in the EU or EEA you may also complain to your own local supervisory authority.
If personal data we hold is exposed, we will investigate and respond as required by applicable law. Where required, we will notify the relevant supervisory authority without undue delay and, where feasible, within the period required by law.
Where a breach is likely to result in a high risk to your rights and freedoms, we will notify affected individuals where required by applicable law, using appropriate means such as email where we have an address, or a notice on this Website.
Paddle, Cloudflare, Resend and Sentry may process data outside the UK. Where that happens we rely on the safeguards the law recognises, which depending on the country and the provider may be an adequacy decision, Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful mechanism.
Where available and configured, we use European data processing options for crash reporting.
Contact us at support@joebox.app for further information about the safeguards applicable to a particular transfer.
We may update this Privacy Policy from time to time. Material changes will be communicated via the Website. The "Last updated" date at the top reflects the most recent revision. Where required by applicable law, we will provide additional notice or seek your consent before applying material changes.
For any privacy-related questions, requests, or concerns:
Startup Europe India Network Limited
Email: support@joebox.app
Website: joebox.app