Privacy Policy

Sahab Company is the data controller for personal data we collect to operate Sahabbox accounts, billing, support, security, and product communications — for example your name, email address, authentication details, and usage metadata about how you interact with the service.

When you or your organization upload files, folders, and related metadata into Sahabbox (your “Customer Content”), we generally act as a data processor on behalf of the account owner or organization that controls that workspace. In that case, the customer determines the purposes of processing Customer Content, and we process it only to provide the service as instructed.

If your organization provides you with a Sahabbox account, your employer or that organization may be the primary controller for workplace account data and Customer Content. Please also review any privacy notice your organization provides.

We collect personal data that you provide directly, data generated when you use Sahabbox, and limited information from service providers that help us run the platform. The categories below describe what we typically process.

• Account and profile data: name, email address, password or authentication tokens, organization or workspace affiliation, role, and preferences you set in the product.
• Customer Content: files, folders, previews, comments, sharing links, and related metadata you or your collaborators upload or create in Sahabbox.
• Usage and technical data: IP address, device and browser type, approximate location derived from IP, log timestamps, feature usage events, performance diagnostics, and security signals such as failed login attempts.
• Billing and subscription data: plan type, payment status, invoices, and limited payment-related identifiers processed via our payment providers (we do not store full card numbers on Sahabbox servers).
• Support and communications: messages you send via /contact, email to [email protected], or in-product support channels, including attachments you choose to share for troubleshooting.
• Cookies and similar technologies: identifiers used for session management, security, preferences, and — where applicable — analytics as described in the Cookies section and our cookie notice (#cookies).

We use personal data only for purposes that are necessary to provide Sahabbox, keep it secure, improve it responsibly, and communicate with you about the service. We do not sell personal data.

• Provide, maintain, and improve Sahabbox — including authentication, storage, search, sharing, collaboration, and account administration.
• Process Customer Content solely to deliver the features you request (upload, sync, preview, share, restore, delete) and to operate the infrastructure that stores and transmits those files.
• Secure the service — detect abuse, prevent unauthorized access, investigate incidents, and enforce our Terms and Terms of Use.
• Manage subscriptions, billing, invoices, and plan changes.
• Respond to support requests and operational notices, including service status and security-related communications.
• Comply with legal obligations and respond to lawful requests from authorities where required.
• Analyze aggregated or de-identified usage patterns to improve reliability, performance, and product design, where permitted by law and our agreements with customers.

Where the GDPR or similar laws apply, we rely on one or more of the following legal bases, depending on the processing activity.

Contract: processing necessary to provide Sahabbox under our agreement with you or your organization — for example creating an account, storing Customer Content as instructed, and delivering core features.

Legitimate interests: operating and securing the service, preventing fraud and abuse, improving reliability, and communicating about product updates that are closely related to your use of Sahabbox — balanced against your rights and expectations.

Consent: where we rely on consent (for example certain non-essential cookies or optional marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Legal obligation: processing required to meet applicable law, regulatory requirements, or valid legal process.

We share personal data only when necessary to operate Sahabbox, comply with the law, or protect rights and safety. We require processors and subprocessors to protect data and use it only for instructed purposes.

• Service providers (processors): hosting, storage, email delivery, analytics (where used), payment processing, customer support tooling, and security monitoring — bound by contractual data-protection terms.
• Organization administrators: if you use Sahabbox under a company or team account, admins may access account information, usage details, and Customer Content according to their workspace policies and permissions.
• Collaborators and recipients: when you share files or links, the people you choose may access the shared content and related metadata you expose through sharing settings.
• Legal and safety: we may disclose information if we reasonably believe disclosure is required by law, necessary to enforce our agreements, or needed to protect Sahab, our users, or the public from harm or illegal activity.
• Business transfers: if Sahab Company is involved in a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction, subject to appropriate safeguards and notice where required.

We retain personal data only as long as needed for the purposes described in this policy, including providing the service, meeting legal and accounting requirements, resolving disputes, and enforcing agreements.

Account data is generally retained for the life of the account and for a reasonable period afterward to allow reactivation, handle outstanding billing, or meet legal obligations. Customer Content remains available according to your plan and settings until you or an authorized administrator delete it, subject to backup and deletion cycles.

When you delete files or an account, we begin processes to remove or anonymize the data from active systems. Residual copies may persist for a limited time in backups or logs before being overwritten according to our retention schedules. Security and audit logs may be kept longer where needed to investigate incidents or demonstrate compliance.

We implement technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit, access controls, least-privilege operational practices, monitoring for suspicious activity, and regular review of our security posture.

No method of transmission or storage is completely secure. While we work hard to protect Sahabbox, we cannot guarantee absolute security. You are responsible for safeguarding credentials, configuring sharing carefully, and using strong authentication where available. Promptly notify us at [email protected] if you suspect unauthorized access to your account.

Sahabbox may process and store personal data in countries other than the one where you reside. When we transfer personal data internationally, we take steps intended to ensure an appropriate level of protection — such as standard contractual clauses, contractual processor obligations, and careful selection of infrastructure and subprocessors.

If you are in the European Economic Area, the United Kingdom, or another region with data-transfer restrictions, additional safeguards may apply depending on the destination and the nature of the processing. Contact us if you need more information about transfer mechanisms relevant to your account.

Sahabbox uses cookies and similar technologies to keep you signed in, remember preferences, protect against cross-site request forgery and abuse, and understand how the product performs. Essential cookies are required for core functionality and security.

Where we use non-essential cookies (for example analytics that help us measure feature usage), we do so in line with applicable law and, where required, your consent. You can learn more and manage preferences through our cookie notice linked from the site footer (#cookies).

Browser settings also allow you to block or delete cookies. Blocking essential cookies may prevent login, upload, or other core features from working correctly.

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data; to object to certain processing; to data portability; and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a supervisory authority.

To exercise rights related to your Sahabbox account data, contact us at [email protected] or use the form at /contact. We may need to verify your identity before fulfilling a request. If your request concerns Customer Content controlled by an organization, we may redirect you to the appropriate workspace administrator, who is typically best placed to handle that request.

We will respond within the timeframes required by applicable law. Some rights may be limited where we must retain data for legal reasons, security, or to complete transactions you requested.

Sahabbox is intended for business and adult users. We do not knowingly collect personal data from children under 16 (or the minimum age required in your jurisdiction) for the purpose of offering the service directly to them.

If you believe a child has provided us with personal data without appropriate consent, contact [email protected] and we will take reasonable steps to delete the information and, where applicable, close the account.

We may update this Privacy Policy from time to time to reflect product changes, legal requirements, or operational improvements. When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice through the service or by email.

Continued use of Sahabbox after an update becomes effective constitutes acceptance of the revised policy, except where applicable law requires a different form of consent or agreement.

For privacy questions, data-subject requests, or concerns about how Sahabbox handles personal data, contact Sahab Company at [email protected]. You can also reach us through the contact form at /contact.

We aim to respond promptly and work with you in good faith to resolve privacy-related inquiries.