Privacy Policy

Effective Date: October 6, 2025 Last Updated: October 6, 2025

Boxdash (“we,” “our,” or “us”) is committed to protecting the privacy and security of our users’ information. This Privacy Policy describes how we collect, use, store, and protect your data — including any information obtained through Google APIs — and the choices you have regarding your information.

By using Boxdash, you acknowledge that you have read and understood this Privacy Policy.

1. Data Accessed

Boxdash integrates with certain Google services to provide a seamless and secure user experience. Depending on the features you choose to use, our application may request access to specific categories of Google user data through the Google OAuth 2.0 authorization process.

The types of Google data that may be accessed include:

Google Account Information: Basic profile details such as your name, email address, and Google account ID. This information is used solely to authenticate your identity and create or manage your Boxdash account.

Gmail Data (if authorized): Limited metadata such as message IDs, subject lines, and timestamps to enable features that display or organize your email-related information. The contents of emails, attachments, or drafts are never accessed, stored, or processed.

Google Calendar Data (if authorized): Event details such as titles, dates, times, and participant lists to display and manage your calendar within the Boxdash application.

Boxdash does not access or request any unnecessary scopes or permissions beyond what is essential for the application’s core functionality.

2. Data Usage

The Google user data accessed by Boxdash is used exclusively for the following legitimate and clearly defined purposes:

Authentication and Account Management: To verify your identity using Google OAuth and to enable secure sign-in functionality.

Application Functionality: To allow you to interact with your Gmail and Google Calendar data within the Boxdash interface, as explicitly authorized by you.

Service Operation and Maintenance: To maintain reliable service operation, detect technical issues, and improve system performance.

Analytics and Performance Monitoring: To collect anonymous, aggregated metrics through Cloudflare Analytics, which helps us analyze traffic patterns, detect abuse, and optimize site performance.

Boxdash does not use your Google user data for advertising, profiling, marketing, or any unrelated purpose. We also do not combine Google user data with other personal data from unrelated services.

Boxdash maintains a strict policy against selling, renting, or disclosing any Google user data or personal information to third parties.

We only share data when it is necessary for providing and securing the service, as described below:

Cloudflare, Inc. — Our hosting, caching, and security provider. Cloudflare may collect limited technical data (such as IP addresses and request headers) solely for operational purposes like content delivery, DDoS mitigation, and performance analytics. This data is processed in accordance with Cloudflare’s Privacy Policy .

Google APIs — Data is transmitted directly between Boxdash and Google’s servers as part of authorized API requests. This data is handled in accordance with the Google API Services User Data Policy .

Boxdash does not otherwise disclose, share, or transfer user data to any third parties for any reason, unless required by law or necessary to protect the rights, property, or safety of Boxdash or others.

4. Data Storage and Protection

Boxdash follows industry best practices to safeguard user information and minimize data exposure.

Storage: Only minimal user data is stored — specifically authentication tokens and essential identifiers required to facilitate secure sign-ins and maintain user sessions.

Encryption: All sensitive data, including OAuth tokens, are encrypted both in transit (using HTTPS/TLS) and at rest.

Hosting: Data is securely hosted and processed on Cloudflare’s infrastructure, which provides enterprise-grade physical and network security controls.

Access Controls: Access to user-related data is restricted to authorized Boxdash personnel who require it for legitimate operational or development purposes.

No Email or Calendar Storage: We do not permanently store Gmail messages, email content, or Google Calendar event data on our servers.

Despite these measures, no system is completely secure. While we take every reasonable step to protect your information, we cannot guarantee absolute security against all potential threats.

5. Data Retention and Deletion

Boxdash retains user data only for as long as it is necessary to provide the service or comply with legal obligations.

Retention: OAuth tokens and related authentication data are retained for as long as your Boxdash account remains active. Once an account is deleted or becomes inactive, these tokens are promptly revoked and removed.

User Requests: Users may request deletion of their account and associated data at any time by contacting support@boxdash.com .

Deletion Process: Upon receiving a verified deletion request, Boxdash will permanently remove all associated data, including authentication credentials and user records, within a reasonable time frame (typically within 30 days).

No Residual Google Data: Because Boxdash does not store Gmail or Calendar data, there is no additional user content to delete from our systems.

6. Cookies and Analytics

Boxdash uses cookies to enable core functionality, including user authentication and session management. We also use Cloudflare Analytics, which collects aggregated, non-personally identifiable information such as:

IP addresses (anonymized where possible)

Browser and device type

Pages visited and time spent

Referring websites

This data helps us monitor traffic, detect abuse, and improve performance. It does not include personal identifiers and is not shared with advertising networks or other third parties.

7. Security Commitment

We value your trust in providing your information and take the following additional measures to protect it:

Use of modern encryption standards (TLS 1.2+) for all data transmissions

Regular security audits and access reviews

Immediate token revocation in the event of a suspected breach or unauthorized access

If a data breach is detected that may impact your information, we will take immediate steps to contain it and notify affected users in accordance with applicable data protection laws.

8. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, or legal obligations. Any updates will be posted on this page with an updated “Effective Date.” We encourage you to review this policy regularly to stay informed about how we are protecting your information.

9. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

📧 support@boxdash.com

Boxdash, Inc.

Boxdash’s use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.