Privacy Policy

The short version

Your data is yours. We don’t sell it, we don’t share it with advertisers, and we use it to run techsbox for you. To do that we rely on a handful of service providers, and we list every one of them below along with what each receives.

Who this covers

This policy covers repair shops that use techsbox, the people on their teams, the shops’ own customers whose details are entered into techsbox, and visitors to techsbox.com and to shop pages hosted on it. Each shop decides what it records about its customers. If you are a customer of a shop and want your details corrected or removed, please contact the shop first; you can also contact us.

What we collect

• Account details: your email address, your name if you give it, your shop name, subdomain, address and phone number, and the email addresses of team members you invite. We also record how you first found us (the referring site and any campaign tags in the link).
• What you put into techsbox: customers and their contact details, jobs, notes, files you attach, invoices and payments, inventory, appointments, and the messages sent to your customers.
• What your customers submit: booking requests, service requests and the details they enter on your public pages or in your customer portal.
• Usage information: page views, clicks and technical information such as IP address and browser type, collected through the analytics tools listed below.
• Messages to us: what you send through our contact form or to our email addresses.

How we use it

To provide techsbox: showing your data back to you, sending the emails and texts you ask us to send, processing payments, and signing you in. We also use it to send you emails about your account and about getting started, to provide support, to keep the service secure, and to understand which features get used so we can decide what to build next.

Who we share it with

We share data only with the service providers we use to run techsbox. Each receives what it needs for the purpose listed:

• Neon, for database hosting (PostgreSQL, United States). Everything stored in your account: shop details, users, customers, jobs, invoices, inventory, messages and the other records you create.
• Vercel, for application hosting, file storage and traffic analytics. Every request to techsbox, including IP addresses and request logs. Files you attach to jobs are stored in Vercel Blob. Vercel Web Analytics receives page views without setting cookies.
• Stripe, for subscription billing and customer card payments through Stripe Connect. For your subscription: the owner's email address, the shop name and subdomain, and the card and billing details you enter on Stripe's checkout page. For invoices your customers pay by card: the invoice line items and amounts, the customer's email address if you have one on file, and the card details your customer enters on Stripe's page. We never see or store full card numbers.
• Resend, for sending and receiving email. The recipient address and full content of every email techsbox sends, such as sign-in links and codes, invoices and receipts sent to your customers, team invites and account emails. Email sent to our own @techsbox.com addresses is received through Resend and stored in our database.
• Twilio, for text messages (SMS), through your own Twilio account. If you connect Twilio, the customer's phone number and the text of each message are sent to Twilio using the account credentials you provide. Twilio bills you directly. The credentials you enter are stored in our database.
• Anthropic, for the AI assistant. If you use the AI assistant, your questions and the shop data it looks up to answer them, which can include customer names, email addresses, phone numbers, job details and invoice totals. Your conversations are stored in our database until you delete them.
• PostHog, for product analytics. Page views (including the page address), page exits and clicks, along with standard browser information such as IP address and browser type. When you are signed in we attach your internal user ID and shop ID, never your name or email. PostHog's automatic click tracking can record the visible text of a button or link you click, which may occasionally include a name shown on screen.
• Google Maps, for the map on a shop's public page. If a shop has entered an address, its public page shows an embedded Google Map, so a visitor's browser contacts Google directly and Google receives the shop's address and the visitor's standard browser information.
• Discord and Slack, for internal notifications to our team. Alerts about new signups (shop name, subdomain and owner email), contact form submissions (name, email, company and message) and previews of email sent to our @techsbox.com addresses.

We don’t sell your data or your customers’ data, and we don’t use it for advertising. We may disclose information when the law requires it. If techsbox is ever sold or merged, your data would transfer to the new owner, subject to this policy.

Who at techsbox can see your data

All shops’ data is kept in one shared database, and every record is tied to the shop it belongs to. The application only shows a shop its own records. Our staff can access shop data, including by signing in to a shop’s account, to provide support, fix problems and keep the service running.

Data security

Data is encrypted in transit using TLS. Our database provider, Neon, encrypts stored data as described in Neon’s own documentation. Signing in uses one-time codes and links sent by email rather than passwords. Files you attach to jobs can only be opened by signed-in members of your shop: techsbox checks the sign-in every time a file is opened, and the address where the file is actually stored is never sent to a browser. We are a small team and we do not currently hold security certifications such as SOC 2. No system is perfectly secure, and we can’t guarantee that data will never be accessed without authorization.

Where your data is stored

Our database is hosted by Neon in the United States, and techsbox is served by Vercel. If you use techsbox from outside the United States, your data is transferred to and processed in the United States.

Cookies and similar technologies

• Sign-in cookie: keeps you signed in. A session lasts up to 30 days.
• Attribution cookie: when you arrive from another site or a tagged link, we remember where you came from for up to 90 days so we can tell which channels bring in new shops.
• PostHog: stores an identifier in your browser to count visits and connect the pages viewed in a visit.
• Browser storage: small preferences, such as whether you dismissed a setup checklist, and temporary details while you sign up.

We don’t use advertising cookies or ad tracking pixels.

How long we keep it

We keep your account data for as long as your account exists. Ending a trial or cancelling a subscription does not delete anything: your data stays in your account and stays readable. When you delete a record in the app, such as a customer, it is hidden from the app but may remain in our database. Expired sign-in links and codes are removed automatically within 30 days. Our service providers keep their own copies under their own retention policies; for example, Stripe keeps the payment records it is required to keep.

Your rights

You can export your customers, jobs, invoices and invoice line items as CSV files from within techsbox. If you want a copy of anything else, ask us.

There is no self-serve button to delete an account or a shop. To delete your account or your shop’s data, email us at privacy@techsbox.com from the email address on the account. We will confirm the request with you, remove the shop from the app, delete its data from our database, and let you know when that is done. You can also write to the same address to ask what we hold about you or to have it corrected.

You can stop onboarding emails with the unsubscribe link in each one, and you can delete your AI assistant conversations at any time from the assistant.

Children

techsbox is a business tool and is not directed at children. You must be at least 18 to create an account.

Changes to this policy

If we change this policy, we will update the date at the top of this page. For material changes, we will also email account owners.

Questions?

Email us at privacy@techsbox.com or use our contact form.