Cookies are small text files placed on a browser or device when a website is visited. They may be session cookies, which expire when the browser session ends, or persistent cookies, which remain until their stated expiry or deletion. Similar technologies include local or session storage, pixels, tags and software-development tools that store or read identifiers or device information.
First-party cookies are set by ApiBox. Third-party cookies or technologies are set or accessed by another provider, for example a security, communications, analytics or embedded-content provider. A third party may independently process information under its own privacy notice.
Cookies and similar technologies may be used to:
Cookies are not used to access passwords, OTPs, complete payment credentials or unrelated files stored on a device. Information derived from cookies may be combined with account, device or usage information as described in the Privacy Policy.
Where consent is legally required, non-essential cookies will not be placed or read before the visitor makes an affirmative choice. The cookie banner or preference centre should provide equally accessible “Accept all”, “Reject non-essential” and granular settings. Silence, inactivity or continued browsing alone will not be treated as consent where affirmative consent is required.
A visitor may change or withdraw cookie choices at any time through the cookie-preference control made available on the Platform. Withdrawal does not affect earlier lawful processing. Strictly necessary cookies cannot be disabled through the consent tool, but may be blocked through browser settings; doing so may prevent login or other core features.
The live cookie banner or preference centre should identify each non-essential cookie or similar technology then in use, including its name, provider, category, purpose and duration. Because the technical inventory may change with Platform releases and vendors, that live register forms part of this Policy.
Session cookies normally expire when the session or browser closes. Persistent cookies remain only for the duration stated in the cookie register or until deleted. Retention should be proportionate to purpose: authentication and security identifiers for the session or justified security period; preference records for the stated preference period; and analytics/marketing identifiers for the shortest configured period consistent with their disclosed purpose.
Before adding or materially changing any non-essential technology, the Company should update the technical inventory, assess the provider and data flow, update the banner where necessary and obtain fresh consent if the purpose materially changes.
The Platform may integrate service providers for hosting, cybersecurity, customer support, communications, analytics, maps, video or other embedded content. Such providers may receive IP address, browser/device information, page or event data and identifiers necessary for the feature. ApiBox does not authorise a third party to use this data for unrelated purposes merely because its technology is integrated.
Links to external websites do not cause their cookies to be covered by this Policy once the visitor leaves ApiBox. The external website’s cookie and privacy notices will apply.
In addition to the ApiBox preference centre, browser or device settings can block, delete or notify a user about cookies. Instructions are generally available in the help settings for Google Chrome, Mozilla Firefox, Apple Safari, Microsoft Edge and other browsers. Settings apply by browser and device, so choices may need to be repeated after clearing cookies, changing browsers or using another device.
Blocking all cookies may cause authentication, security, preferences or dashboard functions to fail. Browser “do not track” or similar signals are handled as required by applicable law and supported technical standards; their operation may vary between browsers and services.
Cookie-derived personal data is protected and handled under the ApiBox Privacy Policy. Data may be processed by approved providers in India or other permitted jurisdictions, subject to applicable transfer restrictions and appropriate contractual, technical and organisational safeguards. Personal data is not sold merely because cookies are used.
We may update this Policy when technologies, providers, purposes, legal requirements or Platform features change. The revised effective date will be displayed on this page. Material changes affecting consent will be presented through the banner, preference centre or another effective notice where required.