Privacy Policy

1. Information we collect

We collect information that you provide directly to us, such as account details, profile information, workspace and organization settings, billing contact details, support requests, and any content you submit through the service.

We also collect service-generated information such as agent prompts, files, outputs, logs, usage metrics, device and browser data, IP address, authentication events, and integration metadata needed to operate and secure the platform.

• Account and identity information, including email address and sign-in method.
• Workspace content, files, prompts, agent outputs, schedules, API keys, and configuration.
• Transaction and subscription information processed through our billing providers.
• Diagnostics, telemetry, audit events, and security logs.

2. How we use information

We use collected information to provide, maintain, support, secure, and improve BoxCrew. This includes authenticating users, provisioning organizations and agents, processing payments, responding to support issues, preventing abuse, and measuring product performance.

We may also use information to communicate with you about service updates, security notices, feature releases, and contractual or operational matters.

3. How we share information

We do not sell personal data. We share information only when necessary to run the service, comply with law, or fulfill your instructions.

• Service providers and subprocessors that help us host infrastructure, authenticate users, process payments, monitor reliability, and deliver communications.
• Third-party integrations that you or your organization intentionally connect, such as source control, email, calendar, or model providers.
• Affiliates, advisors, or counterparties involved in a merger, acquisition, financing, or reorganization.
• Regulators, courts, or law enforcement when required by law or when needed to protect rights, safety, or the integrity of the service.

4. Data retention

We retain information for as long as needed to provide the service, satisfy legal and accounting obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of data, your subscription status, and organization-level controls.

You may request deletion of certain account information, but some records may be retained where required for security, fraud prevention, tax, accounting, or legal compliance.

5. Security

We use administrative, technical, and physical safeguards designed to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

6. International data transfers

Your information may be processed in countries other than the one where you live. When we transfer personal data across borders, we use appropriate safeguards where required by applicable law.

7. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, export, or restrict certain personal data, and to object to certain processing activities. Organization administrators may also control some workspace data on behalf of their teams.

You can also manage certain information directly inside the product, such as updating your profile, removing integrations, or deleting content that you control.

8. Children

BoxCrew is not directed to children, and the service is not intended for anyone under the age required to form a binding contract in their jurisdiction.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date on this page and may provide additional notice through the service or by email when appropriate.

10. Contact

If you have questions about this Privacy Policy or your data, please contact BoxCrew through your normal support channel, account representative, or other official contact method made available to your organization.