Privacy Policy

Last updated: October 9, 2026

Millians Solutions S.L., trading as Yubox (“we”, “us”, or “our”), is responsible for the personal information described in this policy. It explains how we handle your information when you use our website, app, and integrations. Our company details and registered address are in the Imprint.

Information we collect

We collect and store:

Account information: your email address, name, and any profile image you provide. Your email address is needed to sign in and receive account messages.
Sign-in and security information: records that keep you signed in, IP addresses, and information your browser sends about itself and your device.
Workspace information and content: workspace memberships, invitations, libraries, projects, assets, and related details you provide. Your uploads may contain personal information, so consider what you include and who can access it.
Messages you send us: information you provide when you contact us for help or make a privacy request.

How and why we use your information

We use your information to:

Provide Yubox, manage your account, store and deliver your assets, and send sign-in codes and workspace invitations. This is necessary to provide the service you request.
Protect accounts, prevent abuse, investigate errors, and respond to support requests. We rely on our legitimate interest in running a secure, reliable service, while respecting your rights.
Meet legal obligations and handle legal claims, where required by law or necessary to protect our legal rights.

Where we ask for your consent for a particular use, you can withdraw it at any time. Using Yubox does not, by itself, give us consent for unrelated uses of your information.

Who can access your information

Workspace members can access information and content according to their permissions. Content in public libraries is available to the public and may be copied or used outside Yubox. A public library cannot be made private again. Deleting content from Yubox cannot recall copies others have already made.

We use Cloudflare to host Yubox, store data and files, deliver content, protect the service, and send essential account emails. Cloudflare processes information on our behalf to provide these services.

We also review Cloudflare’s aggregate traffic statistics from requests passing through its network, including request volume, bandwidth, and approximate unique visitors, to understand broad usage and monitor reliability. This does not add an analytics script, beacon, or analytics cookie to your browser. Request and security information is still processed as described above.

We may also share information where required by law, or where lawfully necessary to investigate fraud, protect people’s safety, or defend legal rights. If Yubox is acquired or merged with another business, account information may transfer as part of that transaction, subject to applicable data protection requirements.

Where information is processed

Cloudflare operates a global network. Content delivery and other processing may take place outside your country, including outside the European Union. This can include personal information contained in uploaded assets, as well as request and security information. Content delivery follows Yubox’s public and private access settings.

Account settings, deletion, and retention

You can edit the profile information available in your account settings. Contact us if information needs correcting and you cannot change it there.

Account deletion is available in the app, but you may first need to transfer ownership of workspaces you share with others. Deleting your account disables access; it does not immediately erase every related record or remove content from other people’s workspaces.

We do not currently publish a fixed deletion period for every type of record. Some records remain after account or content deletion. Retention depends on the purpose of the record, the need to operate and protect the service, and any legal obligations or unresolved claims. You can contact us to request erasure or ask what information we still hold and why.

Your privacy rights

Depending on the circumstances, you can ask us to:

Give you access to your personal information and a copy of it.
Correct inaccurate or incomplete information.
Delete your information or restrict how we use it.
Provide information you have given us in a commonly used electronic format, or transfer it to another provider where the right to data portability applies.

You can object to processing based on our legitimate interests for reasons relating to your situation. You can object to direct marketing at any time. Where processing relies on consent, you can withdraw that consent without affecting earlier lawful processing.

To make a request, email hello@yubox.app. We may need to verify your identity. We normally handle requests free of charge and respond within one month. If a complex request requires more time, we will explain the reason and extension within that month, as permitted by law.

You can also complain to a data protection authority, including the Spanish Data Protection Agency (AEPD) or the authority where you live or work.

Cookies

We use cookies to keep you signed in, briefly display sign-in errors, and remember whether your sidebar is open. The sidebar preference lasts for up to seven days.

We do not currently use advertising or cross-site tracking cookies. Blocking cookies may prevent sign-in or stop some preferences from being remembered.

Children

Yubox is not intended for children below the minimum age in our Terms of Service: 13, or 16 in Europe. If you believe a child below that age has provided personal information, please contact us.

Security

We use access controls and other safeguards to protect your information. No online service can guarantee complete security. If a personal data breach occurs, we will notify the relevant authorities and affected people when required by law.

Other websites

Links and integrations may take you to services operated by other companies. Their privacy policies apply to information they collect.

Changes to this policy

We will update the date above when this policy changes and explain significant changes through the service or by email. If a new use of your information requires consent, we will ask for it separately.