Privacy Policy
This policy explains what information Sandbox ("we", "us") collects when you use our website at sandbox.com.bd and our social media scheduling and management service (the "Service"), how we use it, and the choices you have. Sandbox is based in Sirajganj, Bangladesh.
1. Information we collect
- Account information: your name, email address and business name when you sign up or contact us.
- Connected social accounts: when you connect LinkedIn or Facebook, we receive the information those platforms share with your permission, such as your profile or Page name, profile or Page ID, profile picture and an access token that lets us act on your behalf within the permissions you granted. We never receive or store your social media passwords.
- Call requests: when you use the "Book a call" form, the details you enter (name, email, and optionally your WhatsApp number, LinkedIn profile link, preferred time and message). We use them only to contact you about Sandbox, and delete them on request.
- Content: posts, images, schedules, approvals and replies that you or the Service create in your dashboard.
- Engagement and analytics data: public metrics and comments on your own posts and Pages, such as impressions, reactions and comments, as provided by the platforms' APIs.
- Technical information: basic logs such as IP address, browser type and pages visited, used for security and to keep the Service working.
2. How we use your information
- To provide the Service: drafting content, scheduling and publishing posts you approve, drafting replies you approve, and showing your results.
- To act on your connected accounts only in the ways you authorised, and only after your approval where the Service asks for it.
- To keep the Service secure, prevent misuse and fix problems.
- To contact you about your account and the Service.
We do not sell your personal information. We do not use data from LinkedIn or Facebook for advertising, profiling or any purpose other than providing the Service to you.
3. AI processing
To draft posts, images and replies, the Service sends relevant content (for example a topic, your past posts or a comment you received) to an AI model provider for processing. This content is used only to generate drafts for you. Nothing is published without your approval.
4. Platform data
Our use of information received from LinkedIn and Meta (Facebook) follows their platform terms and developer policies. We request only the permissions needed for the features you use, and we stop using a platform's data when you disconnect that account.
5. Sharing
We share information only with service providers that help us run the Service, such as hosting and storage (Cloudflare) and AI processing, under obligations to protect it; with the social platforms when you publish through them; and when required by law.
6. Storage and security
Information is stored with our hosting provider. Access tokens are stored encrypted and are used only by the Service. We use HTTPS for all connections. No system is completely secure, but we take reasonable steps to protect your information.
7. Retention
We keep your information while your account is active. When you disconnect a social account, we delete its access token. When you delete your account, we delete your personal information and content within 30 days, except where we must keep it by law.
8. Your choices and rights
- Disconnect any social account at any time from your dashboard or from the platform's own settings.
- Ask us for a copy of your information, to correct it, or to delete it.
- See our data deletion instructions.
9. Children
The Service is for businesses and professionals and is not intended for anyone under 18.
10. Changes
We may update this policy. We will change the effective date above and, for significant changes, tell you by email or in the dashboard.
11. Contact
Sandbox, Sirajganj, Bangladesh
Email: info@sandbox.com.bd