Privacy policy

This policy explains how BoxCompute (“BoxCompute”, “we”, “us”) handles information when you use our website, the BoxCompute mobile app and our hosted service at app.boxcompute.ai.

Waitlist

When you join the waitlist, we store your email, request date, approval status and welcome-credit record to review access requests, send an invitation and prevent duplicate promotional grants. Cloudflare Turnstile processes browser and technical signals to protect the form from automated abuse. Joining does not subscribe you to marketing email. You can contact us below to withdraw your request or ask us to delete it.

When you use another server

The mobile app can connect to a self-hosted or third-party BoxCompute server that you choose. That server's operator controls information sent to it, including account information, prompts, files, credentials and workspace activity. Their privacy policy and retention practices apply. BoxCompute does not receive that server's content merely because you use the mobile app.

Information we handle

• Account information: your name, email address, account and workspace identifiers, and the scoped device credential used to keep you signed in. Your password is entered in the browser and is not stored by the mobile app.
• Content and workspace data: prompts, conversations, agent instructions and memory, approval answers, files, images and documents you choose to upload, generated results, and files or command output in your cloud workspaces.
• Connections and credentials: model-provider keys, GitHub connections and other service credentials you choose to add. These are used to provide the connection you request and are not used for advertising.
• Billing information: your plan and its status, credit balance, purchase, refund and dispute records, and the Stripe customer identifier linked to your account. You enter card details on Stripe's checkout page; we do not receive or store your full card number.
• Usage and technical data: sandbox and agent operations, resource usage, timestamps, request and security logs, IP address, browser or app version, and error information needed to operate, secure and troubleshoot the service.
• Support information: information you include when you contact us.

The app also stores its scoped sign-in credential in the device's secure storage. Drafts, appearance, model preference and recent workspace selections are stored locally on the device. The app does not include an advertising SDK and does not request your precise location, contacts, camera or microphone.

How we use information

We use information to authenticate you; provide conversations, agents, connected services and isolated workspaces; process the actions you request; maintain account and billing records; prevent fraud and abuse; secure and troubleshoot the service; provide support; and comply with law.

Processors and connected services

We may provide information to infrastructure, hosting, storage, email and security providers that process it for us. Payments are processed by Stripe, which receives your payment details and your account email to take payments, manage subscriptions and prevent fraud. Prompts, attachments and relevant workspace context may be sent to the AI model provider selected for a task. If you connect GitHub or another external service, information is exchanged with that service as needed to perform the actions you request. Those external services may process information under their own terms and privacy policies. We may also disclose information when required by law, to protect rights and safety, or as part of a business transaction subject to appropriate safeguards. We do not sell personal information or share it for behavioural advertising.

Security

The mobile app only connects to HTTPS servers. Hosted-service data is protected with access controls and security measures appropriate to the type of information. Sensitive mobile credentials use operating-system secure storage, and sign-out revokes the device credential. No method of storage or transmission is completely secure.

Retention and deletion

We retain hosted account and workspace information while your account is active and as needed to provide the service. Operational and security records are kept for limited periods based on their purpose. You can delete individual saved conversations in the app. To delete a hosted account and its associated data, follow our account and data deletion instructions. We may retain limited records where reasonably necessary for security, fraud prevention, dispute resolution, legal obligations or backup rotation, and then delete or de-identify them when no longer needed.

Children

BoxCompute is a professional developer tool and is not directed to children under 18. We do not knowingly collect personal information from children through the service.

Changes to this policy

We may update this policy as the app or our practices change. We will publish the revised policy here and update its effective date.

Contact

For privacy questions or requests, contact BoxCompute. Please do not include passwords, API keys or sensitive workspace contents in your request.