Privacy Policy

Our Commitment to Privacy

At BB23 LLC, the creator of LinkBox AI, we believe privacy is a fundamental right. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

1.1 Information You Provide

• Account information (email, password, username)
• Profile information (name, avatar, preferences)
• Content you create (entries, collections, comments)
• Files you upload (documents, images, videos)
• Communication with us (support requests, feedback)

1.2 Automatically Collected Information

• Usage data (pages viewed, features used, time spent)
• Device information (browser type, OS, device identifiers)
• Log data (IP address, timestamps, error logs)
• Cookies and similar technologies

1.3 Third-Party Data

• OAuth provider information (Google, Apple, etc.)
• Social media profile data (if you choose to connect)
• Payment information (processed by Stripe)

2. How We Use Your Information

• Provide, maintain, and improve our services
• Process your requests and transactions
• Send you technical notices and support messages
• Respond to your comments and questions
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

3. Data Processing with AI

We use AI APIs (OpenAI, Anthropic, Google) to provide AI-powered features such as:

• Semantic search and embeddings generation
• Knowledge graph entity extraction
• Content summarization and analysis
• RAG (Retrieval-Augmented Generation) responses

Your content sent to AI providers is processed according to their respective privacy policies. API data is not used to train their models.

3.1 Google API Services User Data Policy

LinkBox AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What Google data we access

• Google Sign-In: We access your basic profile information (name, email address, profile photo) to create and authenticate your LinkBox account.
• Google Drive: If you connect Google Drive, we access your selected files for importing documents into your LinkBox knowledge base. We only read files you explicitly authorize.
• Google Calendar: If you connect Google Calendar, we read your calendar events to provide scheduling features in the Life Trainer and daily planning tools.
• Gmail: If you connect Gmail, we can read and send emails on your behalf for the Email Intelligence feature. We access only the threads and messages you interact with through LinkBox.

How we use Google data

• Google user data is used only to provide and improve LinkBox features you have explicitly enabled.
• We do not use Google user data for serving advertisements.
• We do not sell Google user data to third parties.
• We do not use Google user data for purposes unrelated to the core functionality of LinkBox AI.

Storage and security of Google data

• Google OAuth tokens are stored securely in encrypted database storage with row-level security.
• Imported content is stored under your user account and protected by the same enterprise-grade security described in Section 4.
• You can revoke LinkBox's access to your Google data at any time through your Google Account permissions page or through LinkBox settings.

3.2 Dropbox Data Policy

LinkBox AI integrates with Dropbox to provide cloud storage access within your unified knowledge base. This section describes how we handle data received from Dropbox's API.

What Dropbox data we access

• Account Information: We access your Dropbox account ID, email address, and display name to identify your connected account within LinkBox settings.
• File Metadata: We read file and folder metadata (names, paths, sizes, modification dates) to display your Dropbox file structure and enable AI-powered search.
• File Content: When you explicitly import a document, we read the file content to extract text for indexing in your knowledge base.
• File Writing: With your permission, our AI agent can save generated reports, summaries, or organized content back to your Dropbox.

How we use Dropbox data

• Dropbox data is used solely to provide file access, search, and synchronization features within LinkBox AI.
• File content is processed for semantic search indexing and AI-powered retrieval only within your personal knowledge base.
• We do not use Dropbox data for advertising, marketing, or any purpose unrelated to providing LinkBox services.
• We do not sell, rent, or share your Dropbox data with third parties.

Storage, retention, and security

• Dropbox OAuth tokens are stored with encryption and row-level security in our database, accessible only by your authenticated account.
• Imported file content is stored under your user account with the same enterprise-grade protections as all LinkBox data (see Section 4).
• If you disconnect Dropbox from LinkBox, we immediately revoke the stored access tokens. Imported content that was added to your knowledge base is retained unless you explicitly delete it.
• When you delete your LinkBox account, all Dropbox-related tokens and imported content are permanently deleted within 30 days.

Revoking access

You can disconnect Dropbox at any time through your LinkBox integration settings, or by revoking access directly from your Dropbox Connected Apps page.

4. Data Storage and Security

We use Supabase for data storage, which provides:

• End-to-end encryption for data in transit (TLS 1.3)
• AES-256 encryption at rest for stored data
• Regular security audits and updates
• SOC 2 Type II compliance
• GDPR compliance

5. Your Rights

You have the following rights regarding your data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Export your data in a machine-readable format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, visit your account settings or contact us at privacy@linkboxai.com

6. Data Retention

We retain your personal data only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements.

When you delete your account, we permanently delete all your personal data within 30 days, except for data we are required to retain by law.

7. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and sending an email notification for significant changes.

9. Contact Us

If you have questions about this Privacy Policy, please contact us: