Privacy Policy

Introduction

At Cubex Labs ("we", "our", or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and AI-powered agents (PMF Agent, MVP Architect, and Sales & Marketing Agent).

By accessing or using Cubex Labs, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

Information We Collect

Personal Information

When you register for or use our services, we may collect:

• Email address and name
• Company information and business details
• Contact information (phone number, if provided)
• Payment and billing information
• Authentication data (login credentials, OTP codes)

Business and Project Data

To provide our AI-powered validation and development services, we collect:

• Business ideas and hypothesis descriptions
• Market research and validation data
• Customer profiles and Ideal Customer Profile (ICP) information
• Product specifications and MVP requirements
• Interview transcripts and validation responses
• Sales and marketing campaign data

Usage Data

We automatically collect information about how you interact with our platform:

• Log data (IP address, browser type, device information)
• Platform usage patterns and feature interactions
• AI agent query history and results
• Performance and analytics data

How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide PMF validation, MVP architecture, and sales/marketing intelligence through our AI agents
• Account Management: To create and manage your account, process payments, and provide customer support
• AI Training: To improve our AI models and agent capabilities (anonymized and aggregated data only)
• Communication: To send you OTP codes, service updates, validation results, and important notices
• Analytics: To analyze platform usage, optimize performance, and develop new features
• Security: To detect and prevent fraud, unauthorized access, and other security threats
• Legal Compliance: To comply with applicable laws and regulations

AI Processing and Data Usage

Our platform uses advanced AI models to analyze your business data and provide validation insights. We want to be transparent about how your data is used:

• Your business ideas and validation data are processed by our AI agents to generate personalized recommendations
• We may use anonymized and aggregated data to improve our AI models
• We do not sell your business ideas or proprietary information to third parties
• Your sensitive business data is encrypted both in transit and at rest
• We use third-party AI services (OpenAI, etc.) which may process your data according to their privacy policies

Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With trusted third-party vendors who help us operate our platform (payment processors, email services, AI providers, hosting services)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law, court order, or government regulation
• Protection of Rights: To protect our rights, property, or safety, or that of our users
• With Your Consent: When you explicitly authorize us to share your information

We do not sell your personal information to third parties for their marketing purposes.

Data Security

We implement industry-standard security measures to protect your information:

• End-to-end encryption for data transmission (HTTPS/TLS)
• Encrypted storage for sensitive data
• One-time password (OTP) authentication
• Regular security audits and vulnerability assessments
• Access controls and employee confidentiality agreements
• Secure data backup and disaster recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account data: Retained while your account is active and for a reasonable period after closure
• Transaction records: Retained for accounting and legal compliance purposes (typically 7 years)
• Project data: Retained according to your subscription plan and deleted upon request
• Anonymized analytics: May be retained indefinitely for research and improvement

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Export: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing communications
• Restriction: Request limitation on how we process your data

To exercise these rights, please contact us at privacy@cubexlabs.io

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for authentication and platform functionality
• Analytics Cookies: Help us understand how you use our platform
• Performance Cookies: Optimize platform performance and user experience

You can control cookies through your browser settings, but disabling certain cookies may limit platform functionality.

Third-Party Services

Our platform integrates with third-party services that have their own privacy policies:

• Authentication providers (Google OAuth)
• AI and language models (OpenAI)
• Email delivery services (Resend)
• Payment processors (Stripe, etc.)
• Analytics platforms

We encourage you to review their privacy policies to understand how they handle your data.

Children's Privacy

Cubex Labs is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last updated" date
• Sending you an email notification (for significant changes)

Your continued use of our services after changes become effective constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: