Privacy Policy

Last Updated: December 5, 2024

Introduction

Welcome to Scrolbox ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our comic reading platform and services.

1. Information We Collect

1.1 Personal Information You Provide

Account Information:

• Name
• Email address
• Password (encrypted)
• Country code and location
• Profile preferences (language: English/French)

Payment Information:

• Payment method details (processed through our secure payment providers)
• Mobile money phone numbers
• Transaction history
• Billing information

User-Generated Content:

• Comments on chapters
• Likes and reactions
• Reading history
• Purchased chapters and comics

1.2 Automatically Collected Information

Usage Data:

• Chapters viewed and read
• Reading progress and bookmarks
• Time spent reading
• Device information (type, OS, browser)
• IP address
• Cookies and similar tracking technologies

Analytics:

• Chapter views count
• User engagement metrics
• Feature usage statistics
• Performance data

1.3 Firebase Cloud Messaging (FCM)

We collect device tokens and notification preferences to send you:

• New chapter release notifications
• Purchase confirmations
• Cart reminders
• Platform updates

2. How We Use Your Information

2.1 To Provide Services

• Create and manage your account
• Process payments and purchases
• Deliver purchased content (chapters, comics)
• Manage your cart and wish lists
• Track reading progress across devices
• Display personalized recommendations

2.2 To Improve User Experience

• Remember your language preference (English/French)
• Track viewed chapters to show "Read Again" status
• Provide comic and chapter statistics (views, likes, comments)
• Optimize content delivery

2.3 To Communicate With You

• Send transactional emails (purchase confirmations, receipts)
• Deliver push notifications (new chapters, updates)
• Respond to support requests
• Send marketing communications (with your consent)

2.4 To Ensure Security

• Prevent fraud and unauthorized access
• Encrypt sensitive data (passwords, payment info)
• Monitor for suspicious activity
• Maintain platform integrity

3. How We Share Your Information

3.1 Payment Processors

We share payment information with:

• Original Payment Provider (for CI, ML, NE, GW - specific mobile money methods)
• Pawapay (for mobile money in 17+ African countries)
• PayPal (for global payments)
• Card Payment Processors (for credit/debit card transactions)

These processors handle your payment data according to PCI-DSS standards.

3.2 Service Providers

We share data with trusted third parties who help us operate:

• AWS/Cloud Hosting - Infrastructure and storage
• Firebase - Push notifications and analytics
• Email Services - Transactional and marketing emails
• Analytics Tools - Usage statistics and insights

3.3 Legal Requirements

We may disclose your information when required by:

• Law enforcement or government requests
• Legal proceedings or court orders
• Protection of our rights and safety
• Prevention of fraud or security threats

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

4. Data Security

4.1 Security Measures

• Encryption: All sensitive data is encrypted (passwords, payment info)
• Secure Storage: Data stored with encrypted localStorage
• HTTPS: All communications use SSL/TLS encryption
• Authentication: OAuth 2.0 with Google integration
• Access Controls: Limited employee access to user data

4.2 Your Responsibility

• Keep your password secure
• Use strong, unique passwords
• Log out on shared devices
• Report suspicious activity immediately

5. Your Rights and Choices

5.1 Access and Control

You have the right to:

• Access your personal data
• Update your account information
• Delete your account and data
• Export your data in a portable format
• Opt-out of marketing communications

5.2 Cookie Preferences

You can control cookies through:

• Browser settings
• Cookie consent banner
• Opting out of analytics tracking

5.3 Notification Settings

You can manage:

• Push notification preferences
• Email notification settings
• Marketing communication opt-ins

6. Data Retention

We retain your information:

• Account Data: Until account deletion + 30 days
• Transaction History: 7 years (legal requirement)
• Usage Data: 2 years for analytics
• Cookies: As specified in Cookie Policy
• Deleted Accounts: Anonymized after 30 days

7. Children's Privacy

Scrolbox is not intended for users under 13 years old. We do not knowingly collect data from children under 13. If you believe we have collected such data, please contact us immediately.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your residence, including:

• United States (cloud hosting)
• European Union (payment processing)
• Countries where our service providers operate

We ensure appropriate safeguards are in place for such transfers.

9. Region-Specific Rights

9.1 European Economic Area (EEA/GDPR)

EU residents have additional rights:

• Right to object to processing
• Right to restrict processing
• Right to lodge complaints with supervisory authorities
• Right to withdraw consent

9.2 California Residents (CCPA)

California residents have rights to:

• Know what personal information is collected
• Know if personal information is sold or disclosed
• Opt-out of the sale of personal information
• Non-discrimination for exercising privacy rights

9.3 African Union (African Data Protection Laws)

We comply with applicable African data protection regulations including:

• Kenya Data Protection Act
• Nigeria Data Protection Regulation
• South Africa POPIA
• Other relevant national laws

10. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their privacy policies separately.

11. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via:

• Email notification
• Platform announcement
• Push notification
• Updated "Last Modified" date

Your continued use after changes constitutes acceptance of the new policy.

12. Contact Us

For privacy-related questions or requests:

Email: privacy@scrolbox.com Support: support@scrolbox.com Address: [Your Company Address]

Data Protection Officer: dpo@scrolbox.com

13. How to Exercise Your Rights

To access, update, or delete your data:

1. In-App: Go to Settings > Account > Privacy
2. Email: Send request to privacy@scrolbox.com
3. Support: Contact our support team

We will respond within 30 days of receiving your request.

Consent

By using Scrolbox, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.