Privacy Policy

Boxsy Inc. ("Boxsy", "we", "us", or "our") provides software that helps startups and investors manage fundraising, investor relations, and operational workflows.

This Privacy Policy explains how we collect, use, store, and share personal information when you use:

• The Boxsy platform and applications (the "Services")
• Our website (boxsy.io) (the "Website")
• Communications with us (email, events, support, etc.)

If you have questions, contact us at privacy@boxsy.io

1. Who We Are

Boxsy Inc. is a U.S.-based company.

When organizations use Boxsy (for example, a startup team), that organization controls the data entered into the platform. In those cases:

• The organization is the data controller
• Boxsy acts as the data processor

For website visitors, trial users, marketing contacts, and account holders, Boxsy acts as the data controller.

2. Information We Collect

We collect information in three main ways:

A. Information You Provide

This includes:

• Name, email address, phone number
• Account login details
• Organization details
• Billing information (processed via Stripe or payment providers)
• Communications with us
• Content you upload or create inside the platform ("Customer Content")

Customer Content may include documents, investor data, fundraising pipeline information, messages, prompts submitted to AI features, and related operational data.

B. Information Collected Automatically

When you use our Services or Website, we may collect:

• IP address
• Browser and device type
• Usage activity (features used, pages visited)
• Log data
• Approximate location (based on IP)
• Cookies and similar technologies

We use this data to operate, secure, and improve the platform.

C. Information from Integrations

If you connect third-party tools (e.g., QuickBooks, HubSpot, Google, etc.), we may receive data necessary to provide the integration. The scope depends on the permissions you grant.

You can revoke integrations at any time.

3. How We Use Information

We use personal information to:

• Provide and operate the Services
• Manage accounts and subscriptions
• Process payments
• Provide customer support
• Improve features and develop new products
• Monitor security and prevent fraud
• Communicate service updates and product changes
• Send marketing communications (you can unsubscribe anytime)
• Comply with legal obligations

We may use aggregated or de-identified data for analytics and product improvement.

4. AI Features (Boxsy Sherpa)

Boxsy includes AI-powered functionality ("Boxsy Sherpa").

When you use AI features:

• Prompts and related content are processed to generate responses or automate workflows.
• Some AI models are operated by trusted third-party providers.
• We do not use your Customer Content to train public AI models.
• We may collect usage metadata (not Customer Content) to improve reliability and performance.

You control what information you submit to AI features.

5. How We Share Information

We do not sell your personal information.

We may share information in the following situations:

Service Providers

With trusted vendors (e.g., cloud hosting, analytics, payment processors) who help us operate the platform.

Integrations

If you enable third-party integrations, we may share relevant data as instructed by you.

Within Your Organization

Administrators within your organization may access and manage user data.

Legal Requirements

If required by law, regulation, or valid legal process.

Business Transfers

In the event of a merger, acquisition, or sale of assets.

6. Data Retention

We retain:

• Customer Content according to your organization's instructions.
• Account data as long as your subscription is active.
• Certain data after account closure if necessary for legal, compliance, or security reasons.

After cancellation:

• Access remains until the end of the current billing cycle.
• Data remains available for export for a limited period.
• We may retain backup or compliance records as required by law.

7. Security

We implement reasonable technical and organizational safeguards to protect data, including:

• Secure cloud hosting
• Encryption in transit
• Access controls
• Vendor security review

However, no system can guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to:

• Access your data
• Correct inaccurate data
• Delete your data
• Restrict processing
• Object to certain processing
• Request data portability
• Withdraw consent (where applicable)

To exercise rights, email privacy@boxsy.io

If you are part of an organization using Boxsy, contact your organization first.

9. International Transfers

We may process data in the United States and other countries where our service providers operate.

For EU/UK users, we use appropriate safeguards such as Standard Contractual Clauses when required.

10. California Privacy Rights

If you are a California resident:

• We do not sell personal information.
• You may request access to or deletion of your data.
• You will not be discriminated against for exercising your rights.

Submit requests to privacy@boxsy.io

11. Children

Boxsy is not intended for individuals under 16. If we learn we have collected data from a minor without authorization, we will delete it.

12. Third-Party Links

Our Website or Services may contain links to third-party websites. We are not responsible for their privacy practices.

13. Changes to This Policy

We may update this Privacy Policy as our product evolves. If changes materially affect your rights, we will provide notice through the Website or via email.

Continued use of the Services after updates constitutes acceptance of the revised policy.

14. Contact

Boxsy Inc.

Email: privacy@boxsy.io