Privacy Policy

This website, saboxai.com (the “Site”), is operated by Sabox AI [legal entity name and form — e.g. “Sabox AI LLC”, to be confirmed] (“Sabox AI”, “we”, “us”). We are an AI-automation studio: we build and run lead-capture, customer-support, follow-up and back-office automation for businesses.

This policy covers information collected through the Site. When we build and operate automations for a client under a signed services agreement, the handling of that client’s business data is governed by the services agreement, not this policy.

Information you give us

• Booking form. When you submit the form on our Book a call page, we collect your name, company name, phone number, and anything you write in the optional message field.
• Direct contact. If you call, text or email us, we receive whatever information you choose to share, along with your phone number or email address.

Information collected automatically

• Technical request data. Like virtually every website, our hosting infrastructure processes your IP address and standard request metadata (browser type, pages requested, timestamps) to serve pages and keep the Site secure. We use IP addresses transiently to rate-limit form submissions and block spam; we do not store them in any database of our own.
• Server logs. Our hosting provider generates operational logs of requests and errors. In the limited case where the Site accepts your form submission but cannot hand it off to our form-delivery service, the company and phone number you submitted may be recorded in those logs so we can recover your request rather than lose it.

That’s it. The Site has no accounts, no payments, and no file uploads.

This Site does not use cookies. It also does not use third-party analytics, advertising pixels, session-recording tools, social-media trackers or embedded third-party scripts of any kind. Fonts and all other assets are served from our own domain.

Because we don’t track you, there is nothing to opt out of and no cookie banner to click. Browser “Do Not Track” and Global Privacy Control signals are effectively honored by default: we do not sell or share personal information for cross-context behavioral advertising, so there is no sale or sharing to opt out of.

• To respond to you. We use your form submission to call (and, where appropriate, text or email) you back about your request and to run the free scoping call you asked for.
• To provide and improve our services. If you become a client, we use your contact details to deliver the engagement.
• To keep the Site secure. Rate-limiting, spam filtering (including an invisible anti-bot field on the form) and abuse prevention.
• To comply with law. Where we are legally required to retain or disclose information.

Where the GDPR or similar laws apply, our legal bases are: our legitimate interests (responding to the inquiry you sent us and securing the Site), steps taken at your request before entering a contract, and performance of a contract (if you engage us). Where we rely on your consent, you can withdraw it at any time.

We do not use the information you submit through this Site to train AI models.

We never sell or rent personal information, and we don’t share it for advertising. We share it only with the providers involved in running the Site, delivering your submission, and contacting you back:

• Formspree, Inc. — processes form submissions and delivers them to us by email (Formspree privacy policy).
• Google LLC — provides the email service (Gmail) where your submission and any email you send us is received and stored.
• Vercel Inc. — hosts the Site and processes request data and server logs as our infrastructure provider (Vercel privacy policy).
• Phone and messaging carriers — when we call or text you back, ordinary telephone networks and the carriers involved handle the communication in transit.

Beyond that, we would disclose personal information only if required by law or legal process, to protect our rights or safety, or — if Sabox AI is ever part of a merger, acquisition or asset sale — to the successor business under this same policy.

You give us your phone number so we can contact you — that’s the whole point of the form. By submitting it, you agree that we may call and text you at that number about your inquiry. This is direct follow-up from us, not automated marketing, and you can stop it at any time: reply STOP to any text, or simply tell us on a call or by email. Calls and texts travel over ordinary phone networks, so the mobile carriers involved handle them in transit, and message and data rates from your carrier may apply.

We keep inquiry information for as long as it’s reasonably needed to respond to you, run any resulting engagement, and keep normal business records — and we delete it on request (see Your rights), unless we need to keep a specific record to comply with law, resolve a dispute, or protect against fraud or abuse. Operational server logs are retained by our hosting provider for a limited period per its standard retention schedule.

Wherever you are, you can ask us at any time to:

• tell you what personal information we hold about you,
• correct it,
• delete it, or
• stop contacting you.

Email Alex.saboxai@gmail.com or call (917) 860-8977 and we’ll honor the request — we don’t make you jump through verification hoops beyond confirming you’re the person the data belongs to. If a legal obligation or a genuine security need requires us to keep a specific record, we’ll tell you. Deletion covers copies held by our service providers (Formspree and our email service) too — we’ll remove those to the extent the provider allows. Hosting logs can’t be selectively edited; they expire automatically under the provider’s standard retention schedule.

California residents: as a small business, Sabox AI may not meet the revenue or data-volume thresholds that make the CCPA/CPRA formally apply to us. We honor the rights above for California residents regardless, and we do not sell or share personal information as those terms are defined in the CCPA.

EEA/UK visitors: our services are directed to businesses in the United States. If we nonetheless process your personal data, you have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR/UK GDPR, and the right to lodge a complaint with your local supervisory authority. Contact us first — we’ll usually fix it faster.

We collect little, and we protect what we do collect: the Site is served exclusively over HTTPS with strict security headers, the form is protected against spam and abuse, and submissions are handled only by the service providers listed above on their way to our inbox — or, in the rare fallback case described above, recorded in our hosting logs. No method of transmission or storage is 100% secure, but minimizing what we collect is the best protection there is — and we’ve built the Site around that principle.

The Site is a business-to-business service and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has submitted information to us, contact us and we will delete it.

Sabox AI is based in the United States, and our service providers operate infrastructure in the U.S. and other locations. If you access the Site from outside the U.S., your information will be transferred to and processed in the United States and in other countries where those providers operate — places whose privacy laws may differ from your jurisdiction’s.

If we change how we handle personal information — for example, if we ever add analytics — we will update this policy and the “Last updated” date above before the change takes effect. Material changes will be flagged prominently on this page.

Questions, requests, or anything unclear:

• Email: Alex.saboxai@gmail.com
• Phone: (917) 860-8977
• Mail: [business mailing address — to be confirmed]

See also our Terms of Service.