Privacy Policy

Last Updated: December 2024

Our Privacy Commitment

Welcome, and thank you for your interest in CUBE! CDBE Technologies Pvt. Ltd. (hereinafter the “Company,” “We,” “Us” or “Our”) is the owner and operator of the website located at www.cube.ms (the “Platform,” “Website” or “Site”) and the CUBE mobile application available through the Apple App Store, Autodesk App Store and Google Play Store (“App”).

Any reference in this Privacy Policy to the “User,” “You,” “Your” refers to Website Visitors and User Account holders or 'data subjects' in general who use the Services offered by the Company. Any reference to the "Company", "we", "us" refers to CDBE Technologies Pvt. Ltd, a company incorporated in accordance with the laws of the Republic of India or its subsidiaries and affiliates.

The Company is the controller for the personal data provided by the Users to the Company when accessing the Service. This Privacy Policy aims to provide you with information on what personal data we collect from you, how we use it, and with whom we share your personal data.

We are committed to protecting the information that you share with us and explaining how we collect, process, and share that information online. When you use our services, you’re trusting us with your information. We understand this is a big responsibility and work hard to protect your information and keep it secure.

Please take a few minutes of your time to review this Privacy Policy prior to using our Website and/or providing any personal data to us. This privacy policy will explain how our organization uses the personal data we collect from you when you use our website. If you do not agree with our privacy practices as disclosed in this Privacy Policy, please refrain from accessing our Website and providing any personal data to us. Your continued use of the Website shall constitute your acceptance of this Privacy Policy.

Definitions

The General Data Protection Regulation 2016/679 provides the following definitions for some relevant terms used in this Privacy Notice as follows:

‍“Controller” – means “the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.”

‍“Processor” – means “a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.”

‍“Personal Data”  – means “any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”

‍“Processing” – means “Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.”

Information we collect

We collect personal data from our Users when they visit our Website, when they create a User account on our Platform, when they invite other Users to join their project, or are invited by others on the Platform and when they contact us. The personal data that we collect from our Users include:

  • Account Data – User’s full name, email address, phone number, company name and designation. Our lawful basis for collection and use of this data is the performance of our contract with you.
  • Transaction data – When a User upgrades a Portal on the Platform, we obtain additional information about the User’s selected subscription plan, and we also request the User to provide payment details which are collected and processed by our Payment Processor (Stripe Inc or Razorpay - Only applicable in case of online payments). Our lawful basis for the processing of this personal data is the performance of our contract with you.
  • Email subscription – If you subscribe to receive marketing material from us, we request you to provide us with your full name, your email address, your Company name and designation. Our lawful basis for collection and use of this personal data is your express consent which you grant us when you opt-in to receive marketing material from us. You may withdraw your consent from receiving direct marketing material.
  • Customer Support data – When a User emails us or sends us customer support requests through our Platform, we also collect User’s name, email address, and the content of the support request as well as any communication that follows from the initial support request. Our lawful basis for collection and use of this personal data is the performance of our contract with you.
  • Linked Social Account – Where a User links their social media account with the Platform, the Company will have access to certain social media account information of such User, such as Social Media user ID, and any publicly visible information on such social account. The third-party social media platform provider decides the information the Company will be able to access. This personal information is used to enable you to login to your Platform account, should you choose to do so. The lawful basis for our processing of this personal data is performance of our contract.
  • Automatically collected data – We also collect some data about our Users through the use of cookies, pixels, tags and tracking technologies when Users visit our Website. This includes information such as a User’s Internet Protocol address, their geographical location, the device they use to access our Service, the browser and operating system they use, the date and time of their visit. Our lawful basis for collection and use of this personal data is our legitimate interest.

How we use the information we collect

In general, we use your personal data to deliver our Services to you, offer you support when requested, send you promotions and marketing material that we think you will find interesting. We specifically use your personal data to:

  • Create your user account and to enable you to log into your account.
  • Process your User Generated Content;
  • To respond to your support requests;
  • To understand how you use our Service and to improve our User experience;
  • For the fulfilment of our compliance obligations including but not limited to any obligation to respond to lawful requests from government, regulatory bodies or other branches of law enforcement authorities;
  • We may also use anonymized usage data for analysis purposes and to improve our service offerings to our Users;
  • For preventing fraud and ensuring the security of our Platform;
  • To inform you of any system related or policy updates;
  • With your express consent, we may use your personal data for marketing our Services to you including but not limited to sending you promotions, surveys and polls etc.

Cookies

The Company, as well as its third-party service providers, may make use of cookies and other tracking technologies to identify you as a unique user when you visit our Website. Cookies are also used to improve your user experience. Cookies are small pieces of data that are placed on your browser when you visit a website provided your browser is set to accept cookies. These cookies remain on your browser until they expire or you take active steps to delete them yourself. You can easily change your browser setting to decline cookies. To learn more about cookies, please visit www.allaboutcookies.org.

Google Analytics: We may use Google Analytics services to improve our understanding of how our Users interact with our Website. Google Analytics is owned and operated by Google LLC. Google Analytics uses cookies that are stored on your device to evaluate your use of our Website. We use Google Analytics with IP anonymization enabled. We do not use the analytics tools in a way that will identify you. All information collected from you is stored on Google servers located in the U.S. in accordance with EU-US Privacy Shield. You can learn more about how Google processes your personal information at this link.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

You can stop these cookies from being stored on your computer by installing the browser plug-in available here. You can decline cookies from our website by clicking the decline button in the cookie banner on our website or by changing your browser settings to decline all third-party cookies.

With whom we share your personal data

We do not sell or rent your personal data to any third party. We may disclose your personal data, as described below:

  • Performance of our Service: Your personal data will be shared with our employees during the performance of their duties during their employment. When you invite a User to join our Platform through your User Account, we act as the data processor of this Personal data that you provide us.  We will only use this information to send an invitation e-mail on your behalf. We will not use this personal data for any other purposes. You act as the controller of this personal data of the invited individual, and it is solely your responsibility to ensure that you comply with all applicable privacy laws and regulations. Please note that once an invited individual signs up for a User Account on the Platform, we become the data controller of the personal data that they provide to us, just like any other User Account holder and this data is shared with our Processors as set out in this Privacy Policy.
  • Payment Processor: When you upgrade your workspace to one of our paid plans, your credit card data is collected and processed by our Payment Processor Stripe Inc in accordance with their own Privacy Policy.
  • Platform Users: Your limited personal information such as your Username, designation and Company name will be visible to other Platform Users in your workspace.
  • Service Providers: We may disclose your personal data to our Service Providers including but not limited to our hosting service providers, independent contractors who assist us with maintenance and development of our Platform as well as any marketing and customer support service providers that assist us with our business operations. Please note that your personal data may also be accessible to our Processors who process this data on our behalf.
  • Merger or Acquisition: In future, if we undergo a merger or acquisition, your personal data, such as your User Account data will form part of our assets and may be transferred to the new entity. Please note that any transfer of your personal data as a result of a commercial transaction will not negatively impact your privacy rights as specified in this privacy policy;
  • Compliance Obligations: We may disclose your personal data to local and international government authorities, law enforcement bodies, courts of law upon a subpoena or other legitimate government agencies as and when required for compliance with our legal and regulatory obligations, for asserting or defending our rights and interests;

Processing your data and transfer to third-countries

If you are currently residing in the European Economic Area when you use our Service, your personal data may be transferred and processed in the United States of America, India or other parts of the world by our processors and us. Please note that all our data processors use appropriate measures such as compliance with EU-US and Swiss-US Privacy Shield Frameworks to ensure that your personal data receives the same data protection that you enjoy within the EEA. By creating a User Account and using our Services, you grant us your consent to such transfer of your personal data outside the EEA.

Security of your data

We take all reasonable and commercially viable steps to ensure the safety of your personal data, however as with any transmission of information over the internet, we are unable to offer any guarantees as to the security of your personal data.

Retention of your data

We will retain your personal data on our records for the entire duration that your account is active on the Platform. Once you terminate your account, we will not keep your personal data longer than necessary for the fulfilment of our business, legal and regulatory obligations.

Your data rights

The General Data Protection Regulation grants Users in the European Economic Area specific data rights in relation to their personal data:

  • Right to access your personal data: As a data subject in the EEA, you may ask us to provide you with a copy of all your personal data that we hold. To exercise your right, please send us your data request at support@cube.ms, and we will respond to your request within 30 days from the date of receipt.
  • Right to rectification: You have the right to request rectification of any incorrect or incomplete information by accessing your User Account and making the relevant changes. If you require the Company’s assistance, you may exercise your right to rectification by sending us an email.
  • Right to withdraw consent: You have the right to withdraw your consent from receiving any direct marketing material from us by clicking the “unsubscribe” button at the bottom of our marketing email or alternatively by contacting us at support@cube.ms with the words with your request. Please note that when you withdraw your consent from receiving direct marketing material from us, you will still continue to receive Service and Policy related emails from the Company as long as your User Account is active on the Platform. Please note that the Company reserves the right to request proof of identity before servicing any personal data requests outlined above. Your failure to present a proof of identity verification will give the Company the right to decline your request.

Privacy Policies of other websites

Our Company website may contain links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Changes to this Privacy Policy

We may modify and update this Privacy Policy at any time at our sole discretion. In the event we modify this Privacy Policy, we will inform you by changing the last updated date on the top.

Complaints

If you have any concerns about our privacy practices, please contact us at support@cube.ms. If you believe that we are non-compliant with our obligations as a data controller or processor under the General Data Protection Regulation, you have the right to complain to your local supervisory authority. You can find your local supervisory authority here.

Children's Privacy

Our Website is not targeted at persons under the age of eighteen years (children), and we do not intentionally collect any personal data from children. If you are the parent or legal guardian of a child who has provided us with his/her personal data, please immediately contact us, and we will take steps to remove such data from our records immediately.

Enforcement

We expect all employees to comply with this policy and any related policies, standards, processes, procedures, and guidelines. Failure and/or refusal to abide by this policy may be deemed a violation. Compliance with the policies will be a matter of periodic review by the Information security officer / Information Security Team. Any employee found to have violated this policy may be subject to disciplinary action, as deemed appropriate by management and Human Resources policies.

Monitoring: The company employs appropriate technology solutions to monitor policy/ procedure compliance.

Self-Assessment: Directors are required to conduct self-assessment within their areas of control to verify compliance with this policy/ procedure.

Special Circumstances and Exceptions

All exceptions to this policy/procedure will require a waiver explicitly approved by one of our Company's Directors.

Contact us

If you have any questions about this Privacy Policy or if you would like to exercise your personal data rights, you can contact our Data Protection Officer via email or phone:

Vaibhav Singhal
vaibhav.singhal@cube.ms
+91-8130290665

‍Alternatively you can write to us at the following address:
Plot No. 30, Shankar Nagar East, Nagpur – 440010 Maharashtra, India.
‍