Privacy Policy
Last updated: January 24, 2026
1. Introduction
OpenBoxes Solutions LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use OpenBoxes Lift.
By using our Service, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, organization name, and password
- Billing Information: Payment card details (processed by Stripe), billing address
- Profile Information: Job title, phone number, preferences
- Content: Data you upload to the Service, including inventory records, orders, and documents
- Communications: Emails, support tickets, and feedback you send us
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, actions taken
- Device Information: Browser type, operating system, IP address
- Log Data: Server logs, error reports, timestamps
- Cookies: See our Cookie Policy for details
3. How We Use Information
We use collected information to:
- Provide, maintain, and improve the Service
- Process transactions and send billing notifications
- Respond to your requests and support inquiries
- Send service updates and security alerts
- Analyze usage patterns to improve our products
- Detect, prevent, and address technical issues and fraud
- Comply with legal obligations
5. Data Security
We implement industry-standard security measures to protect your data:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- SOC 2 Type II certified infrastructure
- Regular security audits and penetration testing
- Access controls and authentication mechanisms
- Automated backup and disaster recovery
While we strive to protect your information, no method of transmission over the internet is 100% secure.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. After account termination:
- Your Data is available for export for 30 days
- Backups are purged within 90 days
- Anonymized analytics data may be retained indefinitely
- Legal records are retained as required by law
7. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Portability: Request your data in a portable format
- Objection: Object to certain processing activities
- Restriction: Request restriction of processing
To exercise these rights, contact us at privacy@openboxes.cloud.
9. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses for EU/EEA data transfers
- Privacy Shield certification where applicable
- Data Processing Agreements with all subprocessors
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or through the Service at least 30 days before the changes take effect.
12. Contact Us
For questions about this Privacy Policy or our data practices, contact:
Data Protection Officer
Email: privacy@openboxes.cloud
Address: OpenBoxes Solutions LLC, 123 Main Street, Boston, MA 02101