Privacy Policy

We are committed to protecting your privacy. This privacy notice (this "Privacy Notice") is provided by SB Technology, Inc. ("SandboxAQ," "we", "us" or "our") on behalf of itself and its affiliates (including Cryptosense SA).

This Privacy Policy describes how SandboxAQ and its affiliates collects, uses, stores, shares, and secures the personal data related to your use of our websites (https://sandboxaq.com, https://email.sandboxaq.com, https://go.sandboxaq.com, https://pub.sandboxaq.com, https://cryptographycaffe.sandboxaq.com, https://get.sandboxaq.com, https://cryptosense.com, https://discovery.cryptosense.com, https://analyzer.cryptosense.com, https://account.cryptosense.com, https://docs.cryptosense.com, together, the "Websites") and Services.

The capitalized terms used in this Privacy Notice but not defined herein shall have the same meaning as defined in our Terms and Conditions. Terms such as data controller, personal data, special category data, and processing shall have the same meaning as defined in the EU General Data Protection Regulations.

For the purposes of applicable data protection laws, SandboxAQ is a data ‘controller’ in respect of your personal data.

Employees/Job applicants: This Privacy Notice does not apply to personal information SandboxAQ collects from its employees and personnel in the context of their employment. Employees and prospective applicants should review the employee/applicant privacy notice provided separately.

If you are a California resident, please see “Additional information for California residents: Your California privacy rights” below for information provided pursuant to the California Consumer Privacy Act.

This Privacy Notice is not a contract and does not create any legal rights or obligations. 

The types of personal data we may collect and use

We may collect and process the following personal data about you:

(a) Information you provide to us. This might include:

  • Identity data – including full name, title, gender, employment information and job title
  • Contact data – including email address, telephone numbers and location data and
  • Marketing & communications data – including communication preferences.

Such information might be provided when you sign up for and use the Services, consult with our customer service team, send us an email, integrate the Services with another website or service, or communicate with us in any other way.

(b)  Information that we collect automatically. We use cookies and other tracking technologies to collect some of this information. Our use of cookies and other tracking technologies is discussed more below. This might include:

  • Usage data – including Website usage data; and
  • Technical data – including internet protocol (IP) address, account data and device data.

(c)  Information that we obtain from third parties or other sources. We may obtain information about you from third-party sources such as public websites (including social media platforms), publicly accessible databases or registers, third party data providers, and joint marketing partners.

We also note we offer a publicly accessible blog as well as other publicly accessible material such as testimonials. Please be aware that any information you provide in the blog or for a testimonial, such as your name, your company name, or any statement you make, may be read, collected, and used by others who access them. To request removal of your personal information from our blog or community forum, please contact us as described below (see "Contacting Us").

Using your personal data: the legal bases and purposes

Your personal data may be stored and processed by us for the following purposes:

  1. Providing you with the Services;
  2. Assessing the needs of your business to determine or suggest suitable products;
  3. Sending requested product or service information;
  4. Responding to customer service requests;
  5. Administer your account;
  6. Sending promotional and marketing communications and other advertising;
  7. Responding to your questions and concerns;
  8. General business administration, including communicating with clients, communicating with service providers and counterparties, the administration of IT systems, and monitoring products; and
  9. Compliance with legal, tax and regulatory obligations.

We are entitled to process your personal data in these ways for reasons including:

How we may share your personal data

Except as outlined in this Policy, SandboxAQ does not sell your personal information. We may from time to time, in accordance with the purposes described above and as permitted by applicable law, disclose your personal information to other parties, such as affiliates of SandboxAQ, or sub-contractors and service providers we use to help us provide our Services. Some of these persons will process your personal data in accordance with our instructions and consistent with this Privacy Notice and others will themselves be responsible for their use of your personal data. These persons may be permitted to further disclose the personal data to other parties as permitted by applicable law. We may also disclose your personal information to any other third party with your prior consent.

In the event SandboxAQ goes through a business transition, such as a merger or acquisition by another company, or sale of all or a portion of its assets, your personal data will likely be among the assets transferred. You will be notified of any such change in data controllership.

You may contact us at any time to limit our sharing of your personal information. Please note that any such request to limit sharing of information will apply solely to your personal information and, unless otherwise requested, will not apply to other individuals in your organization.

Cookies

When you use our Websites or Service(s), we may store some information on your computer. This information will be in the form of a “cookie” or similar file/technologies. Cookies are small pieces of information stored on your hard drive, not on the Website.

We use the following cookies:

  • Strictly necessary cookies. These are cookies that are required for the operation of the Websites. They include, for example, cookies that enable you to log into secure areas of the Website.
  • Analytical or performance cookies. These allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way the Websites work.
  • Functionality cookies. These are used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
  • Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed, and your interactions with the Websites social media features (such as the Facebook "Like" button).  We may share this information with third parties for this purpose. Your interactions with these features may be governed by the privacy policy of the company providing them. We have no control over the use or governance of these cookies.

We use cookie technology to improve your experience navigating the Websites. You can choose which analytical, functionality and targeting cookie you consent to – the cookies will not be used without your consent. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

Online privacy and tracking technologies

By visiting our Website or engaging with us via email, we may collect personal data about you. We use technologies such as web beacons in analyzing trends, administering the Websites, tracking users’ movements around the site, and gathering demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual and aggregated basis. We gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), and other device information. We link this automatically-collected data to other information we collect about you.

Links to other websites

The Website may include links to other websites maintained by third parties that are not owned or controlled by SandboxAQ. This Privacy Notice is limited to our own information collection practices, and we are not responsible for the privacy or information collection practices of other websites. We encourage you to be aware when you leave or are redirected from our Websites and to read the privacy policies of any linked website.

International data transfers

SandboxAQ is headquartered in the United States and works with customers and partners globally. Your personal information may be transferred to our affiliates or service providers in other countries that may not have a similar level of data protection or privacy laws as the country where you live. We take measures to protect your data in transit and wherever it is stored.

Where we transfer your personal data outside your home country, we will take steps to ensure that your personal data is protected as required under applicable data protection law (including, where appropriate, under an agreement on terms approved for this purpose by the European Commission or the relevant government or supervisory authority, as the case may be).

You can obtain more details of the protection given to your personal data when it is transferred outside of your home country by contacting us using the details set out under "Contacting Us" below.

Retention of personal data

How long we hold your personal data for will vary. The retention period will be determined by various criteria, including the purposes for which we are using it. We generally retain personal data we process for as long as an account is active, as needed to provide the Service(s) or as required by legal or regulatory obligations. If you wish to terminate your account or request that we no longer use your data, please contact us by using the details set out under "Contacting Us" below. We delete all your data on the expiry of 14 days after the termination of your account, except as otherwise required by applicable law or for internal compliance purposes.

Your rights

Depending on your jurisdiction, you may have a number of legal rights in relation to the personal data that we hold about you. These rights include the following:

  1. The right to obtain information regarding the processing of your personal data and access to the personal data that we hold about you.
  2. In some circumstances, the right to receive some personal data in a structured, commonly used and machine-readable format and the right to request that we transmit that data to a third party where this is technically feasible. Please note that this right only applies to personal data which you have provided to us.
  3. The right to withdraw your consent to our processing of your personal data at any time. Please note, however, that we may still be entitled to process your personal data if we have another legitimate basis (other than consent) for doing so;
  4. The right to request that we rectify your personal data if it is inaccurate or incomplete.
  5. The right to request that we erase your personal data in limited circumstances. Please note however that there may be circumstances where you ask us to erase your personal data but we are legally entitled to retain it or such erasure is prohibited by law;
  6. The right to object to, and the right to request that we restrict, our processing of your personal data in certain circumstances. Please note that there may be circumstances where you object to, or ask us to restrict, our processing of your personal data but we are legally entitled to continue processing your personal data and/or to refuse that request.
  7. The right not to be subject to solely automated decision-making, including profiling, which have a legal or similarly significant effect on you.

You can exercise your rights by contacting us by using the details set out under "Contacting Us" below. We may ask you to verify your identity to help us respond efficiently to your request.

You also have the right, at any time, to lodge a complaint about our processing of your personal data with the relevant body regulating data protection in your country. In the UK, the data protection authority is the UK Information Commissioner's Office. A list of the EU data protection authorities and contact details is available at http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.

Additional information for California residents: Your California privacy rights.

If you reside in California, you have the right to ask us one time each year if we have shared personal information with third parties for their direct marketing purposes. To make a request, please send us an email, or write to us at the address listed below. Indicate in your letter that you are a California resident making a “Shine the Light” inquiry.

If you reside in California, you can make the following more specific requests with respect to your personal information:

  • ‍Access – You can request that we disclose to you the categories of personal information we collected about you, the categories of sources from which we collected the personal information, the categories of personal information we sold or disclosed, our business or commercial purpose for collecting and sharing the personal information, the categories of third parties with whom we shared the personal information, and the specific pieces of personal information we collected about you over the past 12 months.
  • Deletion – You can request that we delete your personal information that we maintain about you, subject to certain exceptions.

SandboxAQ will not discriminate against you because you made any of these requests.

California residents can make these requests by using the details set out under "Contacting Us" below. We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law. Except as otherwise provided by applicable California law, note that for purposes of these requests under this Section, personal information does not include information about job applicants, employees and other of our personnel; information about employees and other representatives of third-party entities we may interact with; or information we have collected as a service provider to our clients.

We will take reasonable steps to verify your identity prior to responding to your requests. For example, we may utilize a third-party verification provider to assist with verifying your identity. The verification steps may vary depending on the sensitivity of the personal information and whether you have an account with us.

California residents may designate an authorized agent to make a request on their behalf. When submitting the request, please ensure the authorized agent is identified as an authorized agent.

For purposes of California residents making these requests, please also note the following regarding how we collect, use, and share your personal information as described in this Privacy Notice, including in the previous 12 months:

  • We may collect, use, and disclose for our business and commercial purposes, categories of personal information as set forth in applicable California law, including: identifiers; payment and customer records information; characteristics of protected classifications under California or federal law (such as demographic information like age or gender); commercial information; professional or employment information; internet or other electronic network activity information; and geolocation data. See above for additional detail.
  • We collect and use these categories of personal information for the business and commercial purposes described above in this Privacy Notice.
  • We collect these categories of personal information from the sources described above.
  • We may disclose each of the foregoing categories of personal information for the business and commercial purposes described in this Privacy Notice to the extent permitted by applicable law to the categories of third parties as described above in this Privacy Notice.

Our websites and services are not intended for children.

Our Websites and our services are meant for adults. We do not knowingly collect personal information from children under 18. If you are a parent or legal guardian and think your child has given us information, you can contact us by using the details set out under "Contacting Us" below.

We use standard security measures.

We value the security of your data and take reasonable measures to keep your data secure, but we cannot promise that your use of our Websites or Services will be completely safe. Any transmission of your data to us or our Website is at your own risk. We encourage you to use caution when using the Internet.

We may update this Privacy Notice.

We may update this Privacy Notice from time to time and post the updated copy to our Websites. Please check our Websites periodically for updates.

Contacting Us

 If you would like further information on our privacy policy, or practices, please contact us at privacy@sandboxaq.com.

Last Updated: October 2022

© 2025 SandboxAQ | Privacy Policy  | Consent Preferences | Terms | Media Kit | Employee and Prospective Employee Privacy Policy