This policy covers the privacy of your personal data and business/Google Drive data when you use the Airboxr app (app.airboxr.com). If you are not an Airboxr app user, your data is guided by the policy on this page instead.
When you visit our sites, interact with our social channels, or attend an event, our servers may be automatically logging the standard data sent to us by your web browser. This data is essential to responding to requests your browser sends us and usually includes your computer's IP address, your browser type and version, the pages you visit, the time and date of your visit, the amount of time spent on each page, and other details.
When you make a request to our servers your device attaches some extra information to the request. This usually includes information like the device’s type (e.g. laptop, tablet, phone), device OS (e.g. Windows, macOS, Android), unique device identifiers, and sometimes location data, depending on the device. To find out exactly what’s sent we recommend you check your device settings.
We might ask you for information like:
This data will only be requested if you access our services or require features that need this data to work.
Legal basis for processing
We collect and process data about you only where we have a legal basis for doing so. The legal bases for processing are when:
It’s necessary for a contract you enter with us
You give us consent to do so
We need to process your data to comply with a legal obligation
You can withdraw consent at any time, however this will not affect any processing that has already happened.
We endeavour not to keep personal data for longer than we need it. While we have your data, we protect it within acceptable means to prevent loss, theft and unauthorised access, disclosure, copying, use or modification. If necessary we may retain your data for our compliance with legal obligation, or in order to protect your vital interests. We cannot guarantee absolute data security and advise that no method of electronic transmission or storage is 100% secure.
Collection and use of information
To enable the integration between Airboxr and your Google account, the app requires certain permissions. These permissions include read, write, and manage access to files in your Google Drive that you use through the Airboxr app. These permissions are necessary for Airboxr to perform its intended functions effectively. A breakdown of the specific Google permissions that Airboxr app requests is as follows:
drive.file - We require this permission to allow you to browse the Google Sheets files that you’ve previously used with Airboxr
spreadsheets - We require this permission to serve the output of your data analysis (hops) into a spreadsheet of your choice
analytics.readonly (optional) - We require this permission when you connect your Google Analytics account to Airboxr to analyse your data there.
adwords (optional) - We require this permission when you connect your Google Ads account to Airboxr to analyse your data there.
webmasters.readonly (optional) - We require this permission when you connect your Google Search Console account to Airboxr to analyse your data there.
Any data from your Google account and Google services you integrate with Airboxr is only used to serve our product features to you. Additionally, we may use this data to personalise your experience with the app and improve our features and services.
How we use your Shopify data
We only collect the minimum personal data necessary to provide our app's functionality. Your data flows directly from Shopify’s API to the app/spreadsheet. Our app requires various read only scopes to provide the necessary functionality to get insights for your Shopify store. You can see the full list of scopes we require at the authorization page when you’re connecting your store.
We don’t retain your store data and only cache it for as long as needed in order to provide our app's functionality and comply with legal and regulatory requirements.
We retain your data within Airboxr for as long as you actively use the app. If you decide to stop using the App and request for data deletion, we will promptly delete your data from our systems, including disconnecting your Google Account from Airboxr. Please note that once your data is deleted, it cannot be recovered.
We prioritize the security of your data. We implement robust security measures to protect against unauthorized access, alteration, disclosure, or destruction of your information. All of your personal and store data, while stored within our systems and during transit across networks, is encrypted.
This serves as a preventive measure against unauthorized access, even if someone has gained entry into our application. It also substantially reduces the potential impact of unintentional public disclosure of data. To learn more about how your data is secured, refer to this help article.
Disclosure of personal data to third-parties
We do not share any data from your Google account connected to Airboxr, with any third parties, unless explicitly authorized by you or required by law. Your data remains confidential and is not disclosed to any external entities.
Your rights around and controls of your data
If you’re under 16, you must have your parent or guardian’s consent to share your personal data prior to the access of our website or use of our services.
You do not have to provide personal data to us, and can withdraw consent at any time. However, if you do not provide certain information we may not be able to provide a complete experience for our website, products or services.
Information from third-parties
If you are a third-party providing us personal data, you represent and warrant that you have the person’s consent prior to disclosure to us.
Notification of data breaches
In any instance where there is evidence that your personal data is breached from our systems, we will openly and transparently notify you of it, and take proactive steps to ensure such a breach does not occur in the future. We comply with all laws applicable to us in the respect of a data breach.
If you believe that we have breached a relevant data protection law or have evidence of any breach, you may contact the Data Protection Officer at using the details below and we will investigate your complaint. You also have the right to contact any regulatory body or data protection authority in relation to your complaint.
Cookies are small pieces of data about you and your activity across the site. Sometimes they store preferences, and other times they return data to who issued them. You can opt-in and out of cookies when they are requested or follow your browser instructions for turning cookies off.
If Airboxr’s assets are acquired, or if we go out of business, we would include data amongst the assets to transfer to any parties who acquire us. You acknowledge such transfers might occur, and that any parties who acquire us may continue to use your personal information according to this policy. In an acquisition context we may also have a new data controller and data protection officer, and their details would be passed onto you.
Limited Use Requirements
As a developer of Airboxr, we comply with the Google API Services User Data Policy, including the Limited Use requirements. This means that the use and transfer of information received from Google APIs adhere to the policy. We only use sensitive scope data to provide or improve user-facing features that are prominent from the Airboxr app's user interface. We may transfer sensitive scope data to others if it is necessary to provide or improve user-facing features, to comply with applicable laws, or as part of a merger, acquisition, or sale of assets. We strictly prohibit the use of sensitive scope data for advertising purposes. Additionally, we ensure that sensitive scope user data is not accessed by humans, except in limited circumstances as specified in the Google API Services User Data Policy.
The Airboxr app’s use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Limits of our policy
Our site, social media profiles and product/service offerings may link to external sites that are not operated by us. In such an event please be aware that we cannot control the content or policies of those sites, and do not accept responsibility or liability for their privacy practices.
Changes to this policy
Airboxr Data Protection Officer
Effective date (DD/MM/YYYY): 18/07/2020