Privacy Policy

1. What we collect

Account data: your email address, name, and workspace metadata when you sign up.

Email content: emails and attachments sent to your BounceBox inbound addresses, stored so they can be processed and so you can review results.

Extraction results: the structured data produced from your emails, plus delivery logs and usage counters.

Billing data: handled by our merchant of record, Polar, or by Apple for subscriptions bought in the iPhone app. We receive subscription status and customer or transaction identifiers, not card numbers.

2. How email content is processed

Received emails are processed by machine-learning models through the configured AI providers to extract the fields you requested. Email text and supported PDFs or images may be sent to the provider for reading; spreadsheets are parsed into text before extraction. Extraction runs on Anthropic, with OpenAI via OpenRouter as the fallback; email classification and product matching run on TypeSafe, with Cloudflare Workers AI as the fallback. Do not send content you are not authorized to share with these processors.

3. Retention

The raw-input retention window is 14 days on Starter and 30 days on Pro and above. Raw email and attachment storage is subject to scheduled expiry. Settings → Data & retention provides a raw-input purge action. Deletion is a processing operation, not a promise of instantaneous removal from every provider system or backup.

Structured extraction results, delivery logs and catalog records are separate from raw inputs and may remain after raw-input expiry. Raw-input expiry does not delete these structured records. Contact support@bouncebox.app for deletion or workspace-closure requests beyond the available dashboard controls.

If optional customer history is enabled for your workspace and a customer, human-approved structured order facts may also be stored separately as interpretation context. Such history is distinct from the original email and attachments and may persist after their expiry. Disabling future history use is not the same as deleting stored records. Contact support for questions about availability or removing structured customer data.

4. Sub-processors

Service providers include Cloudflare (application hosting, D1 database, R2 storage, email receiving and sending, and Workers AI model processing), Anthropic (model processing), OpenRouter (model routing), OpenAI (model processing), TypeSafe (model processing), Polar (billing and merchant of record), Apple (App Store subscriptions bought in the iPhone app) and Google Analytics (anonymous site-traffic measurement on public pages). These providers process data needed for their respective services; this policy does not promise that all processing occurs in one region.

5. Your rights

You can view extracted results in the dashboard and use the available raw-input purge control in Settings → Data & retention. For exports, structured-data deletion, workspace closure, or GDPR/CCPA requests not covered by available controls, contact support@bouncebox.app. A DPA can be discussed for Custom plans.

6. Security

Workspace access requires authentication. Database access is workspace-scoped, inbound webhook signatures are checked, and outbound webhooks use HMAC-SHA256 signatures. These controls do not make AI extraction error-free; review sensitive results before using them in downstream systems.

7. Cookies

We use the minimum cookies required for authentication (session cookies issued by BounceBox). We do not use advertising cookies or trackers.

On our public pages we optionally use Google Analytics 4 to measure site traffic (page views, traffic sources). It loads only after you accept the analytics-consent banner; your choice is stored in your browser. The signed-in dashboard does not include analytics.

8. Contact

Privacy questions: support@bouncebox.app.