How we collect, use, and protect your information.
Last updated: June 30, 2025
Your privacy matters to us. This policy describes exactly what data we collect, why we collect it, and how you can control it. If you have questions at any time, reach out to privacy@boxedflows.com. For our Terms of Service, see here.
BoxedFlows, Inc. ("BoxedFlows", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services ("Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.
We collect information you provide directly to us, such as when you create an account (name, email address, password), subscribe to a plan (billing information processed via Stripe), or contact support. We also collect information automatically when you use the Service, including log data (IP address, browser type, pages visited, timestamps), device information, and usage data (features used, actions taken, session duration). If you connect third-party integrations (e.g., Slack, Google Ads), we may receive data from those services as authorized by you.
We use the information we collect to: (a) provide, operate, and improve the Service; (b) process transactions and send related information including purchase confirmations and invoices; (c) send administrative messages, updates, and security alerts; (d) respond to your comments and questions and provide customer support; (e) send marketing communications, where permitted by law and subject to your preferences; (f) monitor and analyze usage patterns to improve user experience; (g) detect, investigate, and prevent fraudulent or unauthorized activity; (h) comply with legal obligations.
BoxedFlows includes AI-powered features such as AI Agents. When you use these features, the content you provide (task descriptions, project data, instructions) may be processed by our AI systems and, where applicable, third-party AI providers. We do not use your content to train third-party AI models without your explicit consent. AI interactions may be logged for quality assurance, safety monitoring, and service improvement purposes. You can review our AI data practices by contacting privacy@boxedflows.com.
We do not sell your personal information. We may share your information with: (a) Service providers who assist us in operating the Service (e.g., cloud hosting, payment processing, email delivery, analytics) — these parties are contractually bound to use your data only as directed by us; (b) Third-party integrations you explicitly authorize (e.g., Slack, Google, ad platforms); (c) Law enforcement or government authorities when required by law or to protect our rights; (d) A successor entity in connection with a merger, acquisition, or sale of assets, with notice to you. We may also share aggregated or de-identified information that cannot reasonably be used to identify you.
We use cookies and similar tracking technologies to operate and improve the Service. These include strictly necessary cookies (required for the Service to function), functional cookies (remember your preferences), and analytics cookies (understand how you use the Service). You can control cookie preferences through your browser settings. Disabling certain cookies may affect Service functionality. We do not use cookies for cross-site advertising tracking.
We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your data within 90 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (e.g., tax records, fraud prevention). Aggregated, anonymized data may be retained indefinitely.
We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS) and at rest, access controls, regular security assessments, and employee training. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.
Depending on your location, you may have certain rights regarding your personal information, including: the right to access and receive a copy of your data; the right to correct inaccurate data; the right to request deletion of your data; the right to restrict or object to certain processing; the right to data portability; and the right to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at privacy@boxedflows.com. We will respond within 30 days. We will not discriminate against you for exercising your privacy rights.
We may send you marketing emails about new features, tips, and promotions. You can opt out at any time by clicking "Unsubscribe" in any marketing email or by updating your notification preferences in your account settings. Even after opting out of marketing emails, you will continue to receive transactional and administrative messages related to your account.
The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will promptly delete that information. If you believe we may have collected information from a child under 16, please contact us at privacy@boxedflows.com.
BoxedFlows is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules. Where required, we use appropriate safeguards such as Standard Contractual Clauses for international transfers.
If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell; the right to delete your personal information; the right to opt out of the sale of your personal information (we do not sell personal information); and the right to non-discrimination for exercising your rights. To submit a request, contact us at privacy@boxedflows.com with the subject line "California Privacy Request".
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the lawful bases of contract performance, legitimate interests, legal obligation, or consent. You have the rights described in Section 9 above. Our Data Protection Officer can be contacted at dpo@boxedflows.com. You also have the right to lodge a complaint with your local supervisory authority.
The Service may contain links to third-party websites or services that are not owned or controlled by BoxedFlows. This Privacy Policy applies only to the BoxedFlows Service. We have no control over, and assume no responsibility for, the privacy practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date and, where appropriate, by sending you an email notification. Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: privacy@boxedflows.com — or by mail at BoxedFlows, Inc., 1234 Platform Street, Wilmington, DE 19801, United States. We aim to respond to all privacy inquiries within 30 days.
Privacy questions? privacy@boxedflows.com