SOAPBOX PRIVACY POLICY
Last Updated: 25-Dec-2025
Effective Date: 01-Jan-2026
SoapBox (“SoapBox”, “we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you visit our website (soapbox.in, soapbox.cloud, or any related pages) or use our products and services, including SoapBox.in (collectively, the “Services”).
By accessing or using our Services, you agree to the practices described in this Privacy Policy.
1. Information We Collect
We collect the following categories of information:
1.1 Information You Provide
Account Information: name, email address, job title, organization name, password.
Professional Information: role, preferences, location, communication preferences.
Support Requests: messages, attachments, feedback, customer service inquiries.
Form Submissions: job applications, contact forms, demo requests, onboarding forms.
1.2 Information Collected Automatically
When you interact with our Services, we automatically collect:
Device Information: IP address, browser type, operating system, device identifiers.
Usage Data: pages visited, features used, time spent, referring URLs, click paths.
Cookies and Tracking Technologies: session cookies, analytics cookies, preference cookies.
Log Data: server logs, timestamps, authentication logs, diagnostic data.
We do not use cookies for advertising or behavioural profiling.
1.3 Information from Customers (Enterprise Tenants)
If your employer or organization uses SoapBox:
We may process user profile data, audit logs, workflow interactions, and operational records on behalf of that organization.
In this scenario, your organization is the Data Controller, and SoapBox acts as the Data Processor.
1.4 Information from Third Parties
We may receive information from:
Identity providers (SSO, OAuth, SAML)
Integration partners (e.g., ERP, HCM, HRIS systems)
Recruitment platforms
Public databases
2. How We Use Your Information
We use your information to:
2.1 Provide and Improve the Services
Authenticate users
Deliver platform features
Maintain audit logs and operational integrity
Monitor system performance and reliability
2.2 Communicate With You
Respond to inquiries
Send service notifications
Provide onboarding, product updates, and support
2.3 Ensure Security & Compliance
Investigate incidents
Prevent fraud or misuse
Maintain compliance with regulatory obligations
2.4 Research & Product Development
Improve features
Conduct usage analytics
Enhance the platform experience
2.5 Legal Requirements
Respond to legal obligations
Protect the rights and safety of SoapBox, our users, and the public
We never sell personal data.
3. Legal Basis for Processing (GDPR Users)
Where GDPR applies, we process your data based on:
Contractual necessity – to provide the Services.
Legitimate interests – improving and securing the platform.
Consent – for cookies or marketing communications.
Legal obligation – regulatory compliance, audit responsibilities.
4. How We Share Information
We may share information with:
4.1 Service Providers (Processors)
Cloud hosting providers (e.g., Oracle Cloud Infrastructure)
Analytics providers
Support or ticketing systems
Email and communication services
All service providers follow strict confidentiality and data protection agreements.
4.2 Enterprise Customers
If your organization uses SoapBox, your data may be shared with authorized administrators in your organization.
4.3 Legal & Compliance
We may disclose information to comply with:
Applicable laws
Government or regulatory requests
Legal processes or investigations
4.4 Business Transfers
If SoapBox undergoes a merger, acquisition, or restructuring, data may be transferred to the successor entity.
We never sell personal information to advertisers or third parties.
5. Data Retention
We retain personal data:
As long as necessary to provide the Services
As long as your organization remains an active tenant
According to legal, regulatory, or contractual requirements
According to data retention settings configured by the customer (tenant)
When data is no longer needed, it is securely deleted or anonymized.
6. Data Security
We implement administrative, technical, and physical safeguards, including:
Encryption at rest and in transit
User authentication and access control
Audit logs and monitoring
Network segmentation
Regular security assessments
Incident response protocols
No system is 100% secure, but we take extensive measures to protect your data.
7. Your Privacy Rights
Depending on your jurisdiction, you may have rights to:
Access personal data
Correct inaccuracies
Request deletion
Restrict or object to processing
Request data portability
Withdraw consent
To exercise your rights, contact us at:
info@soapbox.in
For enterprise users, requests may need to be directed to your organization (the Data Controller).
8. Cookies and Tracking Technologies
We use cookies to:
Maintain sessions
Analyze usage patterns
Improve platform performance
You may disable cookies through your browser settings, though some features may not function properly.
9. International Data Transfers
Data may be stored or processed in:
India
Singapore
European Union data centers
United States (if required)
We use safeguards including:
Standard Contractual Clauses (SCCs)
Data Processing Agreements (DPAs)
Regulatory-compliant hosting environments
10. Children’s Privacy
Our Services are not intended for individuals under 16.
We do not knowingly collect children’s personal information.
11. Third-Party Links
Our website may contain links to third-party sites.
We are not responsible for their content or privacy practices.
12. Changes to This Policy
We may update this Privacy Policy as our Services evolve.
Revisions will be posted with an updated “Last Updated” date.
We encourage periodic review of this page.
13. Contact Us
If you have questions or requests regarding this Privacy Policy, contact us:
SoapBox
Email: info@soapbox.in
Website: www.soapbox.in
Phone: +91 92810 63330