Privacy Policy

Last updated: October 25, 2026

This is a courtesy translation. The Spanish version is the one that legally applies; switch to Español at the top to read it.

This policy explains what personal data Boxinger processes, why, and what rights you have, under Argentine Law 25,326 on the Protection of Personal Data and its complementary rules.

1. Controller

The controller of the database is Carla Liliana Rodriguez, CUIT 27-32532146-1, with address at La Pampa 1175, Belgrano, Ciudad Autónoma de Buenos Aires, Argentina. Contact: hola@boxinger.com.

2. What data we process

• Account: name, email, password (stored encrypted; we can’t see it) and, if you sign in with Google, your Google name, email and profile photo.
• Profile and preferences: the photo or logo you upload, your notification preferences and your interface language.
• Content and activity: ideas, votes, comments, reactions, the boards and teams you create or join, invitations you send (the invitee’s email) and activity dates.
• Integrations: if a board’s Team connects Zapier, Make, Google Forms or another tool, the ideas that arrive that way, with the name and email of whoever asked for them (only the Team sees them). If it connects Slack, we keep the private address of the chosen channel and the names of the channel and workspace.
• Subscription: plan, status, amounts, billing dates and the subscription identifiers in Creem or Mercado Pago, including the Mercado Pago account email you enter when paying. Your card details are processed by Creem or Mercado Pago and never reach Boxinger.
• Contact: what you send us through the contact form or the withdrawal button (name, email, company, message).
• Technical data: what is needed to keep your session and protect the service. From public forms we only keep an encrypted identifier of the connection to prevent abuse, never your IP address.

3. What we use it for

• Creating and managing your account and giving you access to boards.
• Showing your participation on boards to those who have access.
• Sending you service emails: account confirmation, invitations, status changes of your ideas, replies, subscription notices and the notifications you chose.
• Charging the subscription, issuing receipts and meeting legal and tax obligations.
• Answering your questions and requests.
• Keeping the service secure, preventing fraud and abuse, and improving it.

We do not sell or rent your data, we do not use it for third-party advertising and we do not build commercial profiles with it. We process your data with your consent, which you give when signing up, and to provide the service you contracted.

4. Who sees your information within Boxinger

• Your name, your photo and what you post on a board are visible to anyone with access to that board. On a public board, anyone with the link.
• The team that owns a board (Admin and Members) sees the email of those who take part in its Community, so it can manage it.
• The Admin of a team sees the name and email of the members they invite.

5. Providers and international transfer

To run the service we share the necessary data with these providers, who process it on our behalf with adequate security measures:

• Supabase: database, authentication and files, with servers in the United States.
• Hostinger: website hosting and email delivery.
• Google: sign-in with Google, if you choose it.
• Anthropic: on the Team and Enterprise plans, when the Team uses the AI assistant, it processes the product description and the text of the board's ideas, with their vote and comment counts (no names or emails), to return suggestions. Anthropic does not use this data to train its models.
• Slack: only if a board’s Team connects a Slack channel. Depending on the notices it chooses, Boxinger posts in that channel the title and the beginning of the description of ideas, their category, the name of whoever posted them, the vote count and a weekly summary. Boxinger can only post in that channel: it doesn’t read messages, people or any other Slack data. What is posted is subject to Slack’s privacy policy and that team’s workspace settings.
• Creem and Mercado Pago: payment processing, under their own privacy policies. Creem acts as reseller for payments in US dollars.
• Microsoft Clarity: usage statistics for the public pages (home, Slack and legal texts), to understand how they are browsed and improve them. It records clicks, scrolling and mouse movement, the device and browser type, and the approximate country, and it masks what you type in forms. It is only turned on if you accept the cookie notice, and it is never used inside the app, where boards and ideas live.

Some of these providers store data outside Argentina, in countries that may not have an equivalent level of protection. By using Boxinger you consent to that transfer, which is limited to what is needed to provide the service. We may also disclose data if a competent authority requires it under the law.

6. Cookies and local storage

We use essential cookies to keep you signed in and to remember your language, and the browser’s local storage to remember interface preferences and your answer to the cookie notice. If you block them, you won’t be able to sign in. We don’t use advertising cookies.

On the public pages (home, Slack and legal texts) we show you a cookie notice. Only if you click Accept does Microsoft Clarity store its statistics cookies (see section 5) and start recording the visit; if you click Reject, it isn’t loaded. We remember your answer for a year and then ask again. You can change it at any time from Cookie preferences, at the bottom of these pages: if you withdraw it, Clarity stops and we delete its cookies. Rejecting them doesn’t affect using Boxinger.

7. How long we keep it

We keep your data while your account is active. If you delete it from My profile, we delete your profile and your sign-in data. Ideas and comments you posted on other teams’ boards are kept as from a "Deleted user", without your name or email. If you own an account, your teams and boards are deleted with all their content. If the Team disconnects Slack, we delete the channel address; the log of sent notices is deleted after 90 days. Payment records are kept for as long as tax and accounting rules require.

8. Security

We apply technical and organizational measures to protect your data: encrypted connections (HTTPS), encrypted passwords, role-based access controls in the database and restricted access to information. No system is completely infallible; if an incident affecting your data occurs, we will let you know.

9. Your rights

You can access, rectify, update and ask us to delete your data. Most of it you can do directly from My profile (name, photo, notifications, subscription and account deletion). For the rest, write to hola@boxinger.com from your account email. We answer access requests within 10 calendar days and rectification or deletion requests within 5 business days. The right of access is free at intervals of no less than six months, unless you show a legitimate interest.

You can stop receiving optional notifications from My profile › Notifications. Emails needed for the service (security, payments, invitations) keep being sent while you have an account.

The data subject has the right to access their data free of charge at intervals of no less than six months, unless a legitimate interest is shown, as established in article 14, paragraph 3 of Law No. 25,326. The AGENCY FOR ACCESS TO PUBLIC INFORMATION, as the Control Body of Law No. 25,326, has the power to handle complaints and claims filed by those whose rights are affected by non-compliance with the rules in force on personal data protection.

10. Minors

Boxinger is for people over 18. We do not knowingly collect data from minors; if we detect an account belonging to a minor, we close it.

11. Changes to this policy

If we modify it, we will publish the new version on this page with its update date and, if the change is important, let you know by email.

12. Contact

For any question about your data, write to hola@boxinger.com.