BoxPin

Privacy Policy

Effective Date: May 1, 2026

Last Updated: June 19, 2026

1. Introduction

This Privacy Policy explains how Brain & Bones, LLC ("Brain & Bones," "we," "us," or "our"), a Texas limited liability company, collects, uses, shares, and protects information in connection with BoxPin — our web-based application and the marketing website at boxpin.co (together, the "Service").

BoxPin lets you catalog the contents of physical storage boxes using your phone and a marker. You photograph a box's label and its contents, and our AI helps identify and tag the items so your boxes become searchable.

By creating an account or using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

This Policy works alongside our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms of Service.

2. Who This Policy Applies To

This Policy applies to:

  • Individual users who create a free or paid BoxPin account.
  • Family and Business plan members who join a shared team account.
  • Sponsors (e.g., real estate agents, moving companies, and storage operators) who purchase and distribute activation codes.
  • Visitors to our marketing website who join a waitlist, contact us, or otherwise interact with us.

3. Information We Collect

We collect information in three ways: information you give us, information created when you use the Service, and information we receive from third parties.

3.1 Information You Provide

  • Account information. Your name, email address, and password when you sign up. If you sign up using Google, we receive your name, email, and profile image from Google instead of a password.
  • Box content you upload. Photographs of your box labels and box contents, the box names and labels you write, item names, notes, location hints, and any other information you add to your boxes. We refer to this as your "Box Content."
  • Payment information. When you subscribe to a paid plan, our payment processor (Stripe) collects your card or payment details. We do not store your full card number; we store a customer identifier and limited billing metadata (such as plan, status, and renewal dates).
  • Sponsor information. If you register as a Sponsor, we collect your company name, contact name, email, and billing details, along with records of the activation-code batches you purchase and distribute.
  • Communications. Information you provide when you contact support, respond to a survey, join the waitlist, or participate in a beta program (including feedback and any messages you send us).

3.2 Information Created When You Use the Service

  • AI-generated metadata. Tags, item identifications, confidence scores, and label descriptions that our AI generates from the photos you upload.
  • Sharing activity. Records of boxes you share, the method used (link, text, or email), recipient email addresses you enter, and share tokens we generate.
  • Search and matching activity. Your search queries, the number of results returned, label-match attempts, and which boxes were matched. We use these to make search work and to improve the Service.
  • Usage and device data. Log data such as your IP address, browser type, device type, operating system, pages viewed, and timestamps. We capture session and device data in part to decide whether to build a native mobile app in the future.
  • Cookies and similar technologies. See Section 9.

3.3 Information From Third Parties

  • Authentication providers. If you sign in with Google, Google shares basic profile information with us as described above and in Google's privacy policy.
  • Service providers. Our payment processor and infrastructure providers share limited information with us (for example, payment status from Stripe).
  • Sponsors. If you redeem a Sponsor's activation code, we record that your account is associated with that code and the corresponding plan. We share only limited, aggregated redemption and activation statistics back with the Sponsor (see Section 5.4).

4. How We Use Your Information

We use information to:

  • Provide the Service — create and maintain your account, store your boxes, run search and label matching, and let you share boxes.
  • Run AI features — send the photos you upload to our AI provider to identify and tag items, read labels, and power visual label matching (see Section 6).
  • Process payments — manage subscriptions, billing, plan limits, renewals, and cancellations through Stripe.
  • Support sponsor activation codes — validate codes, assign the correct plan, and report activation statistics to Sponsors.
  • Communicate with you — send account, transactional, security, and billing messages; respond to support requests; and, where permitted, send product updates and marketing (which you can opt out of).
  • Improve and secure the Service — analyze usage, fix bugs, prevent fraud and abuse, enforce our Terms, and develop new features.
  • Comply with law — meet legal, tax, and regulatory obligations and respond to lawful requests.

We process your information based on the need to perform our contract with you, our legitimate interests in operating and improving the Service, your consent (where required), and our legal obligations.

5. How We Share Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as described below.

5.1 Service Providers (Subprocessors)

We share information with vendors who help us run the Service, under contracts that limit their use of the data to provide services to us.

We may update our list of subprocessors as the Service evolves.

5.2 People You Choose to Share With

When you share a box by link, text, or email, the recipient can view the contents of that box. Shared links may use a token that allows anyone with the link to view the shared box until the share expires or is revoked. Only share boxes with people you trust.

5.3 Team and Family Members

If you join or create a Family or Business team, other members of that team may be able to view boxes that are shared within the team, consistent with the roles and permissions set for that team.

5.4 Sponsors

If you redeemed a Sponsor's activation code, we share limited, aggregated information with that Sponsor — such as how many codes were issued, redeemed, and activated, and aggregated activation and retention statistics. We do not share the contents of your boxes, your photos, or your individual activity with Sponsors.

5.5 Legal, Safety, and Business Transfers

We may disclose information when we believe in good faith it is necessary to comply with law or legal process, enforce our Terms, protect the rights, property, or safety of BoxPin, our users, or others, or in connection with a merger, acquisition, financing, or sale of assets (in which case we will seek to ensure the recipient honors this Policy).

6. AI Processing of Your Photos

A core feature of BoxPin is AI that reads your box labels and identifies the items inside. To provide this:

  • The photos you upload are sent to our AI provider, which returns item tags, label text, and confidence scores.
  • AI suggestions are not always accurate. You remain the final editor — you can confirm, edit, or remove any AI-generated tag.

If you do not want a particular photo processed by AI, do not upload it to BoxPin.

7. Data Retention

We keep your information for as long as your account is active and as needed to provide the Service. Specifically:

  • Box Content and photos are retained while your account exists. If you delete a box, we remove it from your active account; backups and routine deletion processes may retain copies for a limited period.
  • If you cancel a paid plan, your data remains accessible under the Free plan, subject to Free plan limits. You can export your boxes as a CSV before downgrading.
  • If you delete your account, we delete or de-identify your personal information within a reasonable period, except where we must retain it to comply with law, resolve disputes, prevent fraud, or enforce our agreements.
  • Aggregated or de-identified data that can no longer reasonably identify you may be retained and used without further limitation.

8. Data Security

We use technical and organizational measures designed to protect your information, including:

  • Encryption of data in transit and at rest.
  • Private storage buckets with per-user access controls, so users can only read and write their own files.
  • Row-level security on our database to isolate each user's and team's data.
  • Restricted, server-side handling of API keys and secrets.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for the boxes you choose to share.

9. Cookies and Tracking Technologies

We and our providers use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and understand how the Service is used. You can control cookies through your browser settings; disabling some cookies may affect how the Service works.

10. Your Privacy Rights and Choices

Depending on where you live, you may have some or all of the following rights:

  • Access the personal information we hold about you.
  • Correct inaccurate personal information.
  • Delete your personal information (you can submit a data deletion request through the link in our website footer or by contacting us).
  • Portability — receive a copy of your data, and export your boxes as a CSV.
  • Opt out of marketing emails (use the unsubscribe link in any marketing message).
  • Withdraw consent where processing is based on consent.

To exercise these rights, contact us at support@brainandbonesllc.com or use the in-product and footer tools. We will verify your request and respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

10.1 Texas Residents

If you are a Texas resident, the Texas Data Privacy and Security Act (TDPSA) gives you the rights to confirm whether we process your personal data, access it, correct it, delete it, obtain a portable copy, and opt out of any "sale" of personal data or targeted advertising. BoxPin does not sell personal data and does not use it for targeted advertising. You may appeal a decision on your request by contacting support@brainandbonesllc.com; if we deny your appeal, you may contact the Texas Attorney General.

10.2 California Residents

If you are a California resident, the CCPA/CPRA gives you rights to know, access, correct, delete, and opt out of the "sale" or "sharing" of personal information, and to limit use of sensitive personal information. We do not sell or share personal information as those terms are defined under California law. You may exercise these rights using the contacts above, and you may use an authorized agent.

10.3 Other States

Residents of other U.S. states with comprehensive privacy laws may have similar rights. Contact us to exercise them.

11. Children's Privacy

BoxPin is not directed to children under 13, and we do not knowingly collect personal information from children under 13. You must be at least 18 years old to create an account (see our Terms of Service). If you believe a child under 13 has provided us personal information, contact us at support@brainandbonesllc.com and we will delete it.

12. Where Your Information Is Processed

BoxPin is operated from the United States, and your information is processed and stored in the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your location.

13. Third-Party Links and Services

The Service may link to third-party websites and services (for example, Google sign-in or a Sponsor's site). We are not responsible for their privacy practices. Review their policies before providing information.

14. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last Updated" date and, where appropriate, notify you by email or through the Service. Your continued use of the Service after an update means you accept the revised Policy.

15. Contact Us

Brain & Bones, LLC
6720 CR 803, Burleson, Texas 76028
Email: contact@brainandbonesllc.com
Support: support@brainandbonesllc.com

← Back to home