Privacy Policy

1. Who we are

Boxi Marketing ("Boxi", "we", "us", or "our") is an AI-native marketing agency based in Charlotte, NC. We operate the website at boximarketing.com and related sub-pages. Questions about this policy can be directed to hello@boximarketing.com.

2. Information we collect

We collect information in the following ways:

• Information you provide directly — When you book a strategy call, submit a contact form, or download a lead magnet, you provide us your name, email address, phone number, business name, and any other details you include in your message.
• Usage data — We use PostHog (an analytics platform) to collect anonymised data about how visitors interact with our site, including pages visited, time on page, and click events. No personally identifiable information is attached to these events without your consent.
• Chat conversations — When you interact with the Boxi AI chat widget (the "Ask Pricing & Fit" button visible on most pages), we may store a transcript of your messages and our AI's replies for the purposes described in section 7 below. Email addresses, phone numbers, and other obvious personal identifiers are automatically redacted from stored transcripts before they are written to our database.
• Cookies — We use a single first-party cookie (boxi-theme) to remember your light/dark mode preference. We do not use third-party tracking cookies.

3. How we use your information

• To send you the resource you requested (e.g. the free playbook PDF)
• To respond to your enquiry or schedule the strategy call you booked
• To send follow-up emails related to our services, if you have opted in or if permitted under applicable law
• To analyse and improve our website and marketing
• To send you SMS text messages if you have opted in to receive them (e.g. campaign updates or appointment reminders)

We do not sell, rent, or trade your personal information to third parties.

SMS communications: Mobile phone numbers and SMS opt-in consent collected through our website or client onboarding are used solely to send the messages you have consented to receive. This information will never be shared or sold to third parties for marketing or promotional purposes. You may opt out of SMS messages at any time by replying STOP to any message we send.

4. Email communications

By submitting your email address, you agree to receive transactional emails related to your request (e.g. a confirmation email after booking a call or downloading a resource). We may also send marketing emails about our services. You can unsubscribe at any time by clicking the unsubscribe link in any email we send.

We send email via Resend (resend.com). Your email address is transmitted to Resend solely for the purpose of sending the email. Resend's privacy policy is available at resend.com/privacy.

5. Social media account data (for clients)

If you are a Boxi Marketing client and have connected a social media account (such as a Facebook Page, Instagram account, or other platform) to our scheduling tools, we collect and process the following data on your behalf:

• Access tokens — OAuth access tokens issued by the social platform that authorise us to post on your behalf. These are encrypted at rest and never shared with third parties.
• Account and page information — Page IDs, account names, and profile data needed to identify which account to post to.
• Post and engagement data — Content you schedule through our tools, and performance metrics (likes, comments, reach) retrieved for your reporting.

We collect this data solely to deliver the social media scheduling and publishing services you have engaged us for. We do not use your social media account data for our own advertising, analytics, or any purpose beyond fulfilling your service agreement.

You may revoke our access to your social media accounts at any time through the platform's settings (e.g. Facebook Settings → Apps and Websites). You may also request deletion of stored tokens and data by emailing hello@boximarketing.com.

Our use of Facebook and Instagram data complies with the Meta Platform Terms.

6. Calendar bookings

Strategy calls are booked through Cal.com. When you book a call, Cal.com collects your name, email, and any notes you provide. Cal.com's privacy policy is available at cal.com/privacy.

7. AI chat conversations

The Boxi AI chat widget on our site uses third-party large-language-model providers to answer your questions about Boxi's services, pricing, and fit. To improve reply quality and identify common visitor questions, we may store a transcript of these conversations in our own database.

• What we store — Each message you send and each AI reply, plus a non-personally-identifying conversation identifier, the page you started the chat from, and basic metadata (response latency, the AI model used). We do not store your IP address or any cookie identifier alongside the transcript.
• PII redaction — Before any chat content is written to our database, we run an automated redaction pass that strips email addresses, phone numbers, and Social Security number patterns and replaces them with placeholders such as [email] or [phone]. We use the redacted version for review.
• Retention — Chat transcripts are retained for up to 90 days from the date of the conversation, after which they are deleted. This is shorter than our general 2-year retention because chat data is used solely for short-term service improvement, not record-keeping.
• Who can see them — Only members of the Boxi team with the admin password can view stored conversations, and the review interface is gated by HTTP basic authentication. Transcripts are never sold, shared with third parties, or used to train external models.
• How to opt out — Simply do not engage the chat widget. The widget does not record any data unless you click it open and send a message.
• How to request deletion — Because we do not collect identifying information alongside transcripts, the most reliable way to have your conversations removed is to email hello@boximarketing.com with the approximate date(s) and topics of your chat. We will locate and delete matching conversations within 7 days.

8. Data retention

We retain contact form submissions and booking data for up to 2 years, or for as long as is necessary to fulfil the purpose for which it was collected. Chat transcripts are retained for up to 90 days as described in section 7. You may request deletion of your data at any time by emailing hello@boximarketing.com.

9. Your rights

Depending on your location, you may have rights including:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate data
• The right to request deletion of your data
• The right to opt out of marketing communications

To exercise any of these rights, email us at hello@boximarketing.com.

10. Children's privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy from time to time. We will post any changes on this page with an updated effective date. Continued use of our site after changes constitutes acceptance of the revised policy.

12. Contact

If you have questions or concerns about this Privacy Policy, please contact us at:
Boxi Marketing
Charlotte, NC
hello@boximarketing.com