Who we are
BoxRouter, Inc. ("BoxRouter", "we" or "us"), a Delaware corporation at 3790 El Camino Real, Unit #658, Palo Alto, CA 94306, United States, operates the BoxRouter website, dashboard, API, command-line tools and hosted compute service (the "Service"). This policy explains what personal information we collect, how we use and share it, how long we keep it and the choices you have. Contact: privacy@boxrouter.ai.
BoxRouter decides how account, billing, security and website information is used. For personal information inside the code, files and data you run through the Service ("Your Content"), you or your organization decide what is processed and why, and BoxRouter processes it on your behalf to provide the Service. If your organization gave you access to BoxRouter, its own privacy notice also applies.
Information we collect
Information you give us: your name, email address and sign-in details; workspace names, members and settings; API keys you create; provider credentials, secrets and environment values you save; billing details such as billing address and tax information; and anything you send us in support requests or other messages.
Your Content: code, commands, files, environment values, output and other data in your sandboxes, agents and jobs. It contains personal information only if you put it there.
Information collected automatically: service records such as request and operation identifiers, timestamps, the provider and region used, resource status, usage, latency and charges; and device and connection information such as IP address, browser type and the dashboard pages and features you use. Names, labels and other metadata you give resources are stored in readable form, so do not put secrets or personal information in them.
Information from others: sign-in providers such as Google and GitHub share your name, email address and account identifier when you sign in with them; GitHub shares repository and job information for integrations you install; Stripe shares payment status, a payment-method reference (such as card brand and last four digits) and fraud signals; and compute providers return status and usage information for resources you run. We never receive your full card number.
How we handle your workloads
To run a workload, we send Your Content and the credentials it needs to the compute provider you choose or our routing selects. Some data passes through BoxRouter on the way, and some goes directly between you and the provider. Ordinary command text, command output and file transfers are not kept in BoxRouter's operation history. Features that need stored content keep it only for that feature: uploaded artifacts for about 24 hours, saved secrets (encrypted) until you delete them, and volume files and their checkpoints until you delete the volume.
We do not sell Your Content, use it to train AI models or use it for advertising. Our staff do not access it except when needed to operate or secure the Service, investigate abuse, comply with the law or help you when you ask.
Compute providers process Your Content under their own terms and data practices, which differ in logging, retention, training and storage location. When you use your own provider account, your agreement with that provider governs how it handles your data. Destroying a sandbox does not necessarily delete the provider's logs, backups, snapshots or images. Review a provider's terms before sending it sensitive data.
How we use information
We use personal information to provide, operate and maintain the Service; sign you in and manage workspaces; run and route your workloads; meter usage, bill, take payments and process refunds; send service, security, billing and account messages; provide support; monitor reliability and performance and improve the Service; detect, prevent and investigate fraud, abuse, security incidents and violations of our Terms; and comply with the law and enforce our rights.
We send marketing email only where the law allows, and every marketing email has an unsubscribe link. We may create aggregated or de-identified information that does not identify you, such as usage statistics, and use it for any lawful purpose.
If you are in the European Economic Area, the United Kingdom or another place with similar rules, our legal bases are: performing our contract with you (providing the Service, billing and support); our legitimate interests in securing, protecting and improving the Service and communicating with customers, balanced against your rights; complying with legal obligations such as tax and accounting rules; and your consent where we ask for it, which you can withdraw at any time.
How we share information
We do not sell your personal information or share it for cross-context behavioral advertising.
We share personal information only with: service providers that host and operate the Service for us, under contracts that limit how they use it (see Service Providers); the compute providers that run your workloads; integrations you choose to connect, such as GitHub; other members and administrators of your workspace, who can see its resources, activity and settings; and anyone else you direct us to share it with.
We may also disclose information when we believe in good faith that the law, a subpoena or a court order requires it, or that it is needed to protect the rights, safety or property of BoxRouter, our users, providers or others, or to investigate fraud or abuse. If BoxRouter is involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.
Feedback reports
When you send feedback about bugs, benchmarks, documentation or other topics, we keep the topic, your message, one reference, the page route template, release, browser family and major version, operating system, the source of the report, and your account and workspace IDs or reply email. We use this information to review and respond to feedback.
We keep report content for 180 days, then delete it and retain only daily counts by topic.
We do not store the IP address with the report, cookies, page contents, screenshots or the full user agent. We do not send confirmation emails to people who submit feedback.
Retention and deletion
We keep personal information only as long as we need it for the purposes in this policy, then delete or de-identify it. Typical periods: browser sessions expire after 12 hours; sandbox operation records and request links are kept for about 90 days; records of destroyed sandboxes and their encrypted configuration are removed about 30 days after destruction; uploaded artifacts are kept for about 24 hours; volume files and their checkpoints are kept until you delete the volume; user-linked dashboard activity is kept for 35 days; and operational logs at our infrastructure providers are kept for 3 to 31 days, with system metrics kept for up to 13 months.
Account information, API keys, connected accounts and saved secrets are kept until you delete them or close your account. Financial records such as invoices, payments and refunds are kept for seven years after account closure, or longer while a payment is still being reconciled, to meet tax and accounting obligations. Records tied to unfinished operations, billing or disputes may be kept until those are resolved.
Cleanup runs in the background, so removal can take longer than these periods. Database backups are kept for seven days and replaced on a rolling basis, so deleted information can remain in backups until they expire. Compute providers keep data under their own policies. The data retention documentation has the full detail.
Cookies
We use only the cookies and browser storage needed to sign you in, keep your session secure and remember interface preferences. We do not use advertising cookies, third-party analytics or session replay. If we add optional analytics or similar tools, we will update this policy first and ask for your consent where the law requires it. You can block cookies in your browser, but sign-in will not work without the essential ones.
Security and international transfers
We protect personal information with access controls, encryption in transit, encrypted storage of provider credentials and secrets, and hashed API keys. No system is perfectly secure, so we cannot guarantee security. Keep your credentials safe and limit the permissions of provider keys you connect.
BoxRouter is a U.S. company. Your information may be processed in the United States and in other countries where our service providers and your chosen compute providers operate, whose data protection laws may differ from yours. Where the law requires it, we protect international transfers with appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Your rights and choices
You can view and update much of your information in the dashboard, and delete resources, keys and secrets yourself. Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, to object to or restrict some processing, and to withdraw consent. California residents also have the right to know what we collect and not to be discriminated against for using these rights. We do not sell or share personal information, and we do not use sensitive personal information in ways that create a right to limit its use.
To make a request, email privacy@boxrouter.ai from the email address on your account. We may need to verify your identity, and an authorized agent must show that they act for you. We respond within the time the law requires. If we deny your request, you can appeal by replying to our decision, and you can also complain to your local data protection authority.
For personal information inside Your Content, contact the customer who controls it; we will help them respond. Some information must be kept after a deletion request, such as financial records, or until running resources and payments are settled.
Children
The Service is for people aged 18 or older. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact privacy@boxrouter.ai and we will delete it.
Changes to this policy
We may update this policy. We will post the new version with its revision date, and for material changes we will notify you by email or in the Service before they take effect.
Contact
BoxRouter, Inc., 3790 El Camino Real, Unit #658, Palo Alto, CA 94306, United States. Email: privacy@boxrouter.ai.