Privacy Policy

1. Introduction

Boxyard ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our rental management software platform ("Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

We collect several types of information from and about users of our Service:

2.1 Information You Provide to Us

• Account Information: Name, email address, password, phone number, and organization details when you register
• Business Information: Company name, address, business type, and other organizational data
• Customer Data: Information about your customers that you enter into the Service, including names, addresses, contact information, job sites, and rental history
• Inventory Data: Information about your equipment, trucks, dumpsters, and other rental items
• Financial Data: Invoices, charges, payment records, and billing information
• Communications: Messages, notes, and other communications you create within the Service
• Payment Information: Credit card details and billing address (processed securely by our payment processor)

2.2 Information Collected Automatically

• Usage Data: Information about how you use the Service, including pages visited, features used, and actions taken
• Device Information: Browser type, operating system, device identifiers, and IP address
• Location Data: Approximate location based on IP address; precise location if you enable location services for dispatch features
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to collect and track information about your activity

2.3 Information from Third Parties

• Authentication Providers: If you sign in using a third-party service, we receive profile information from that service
• Integration Partners: When you connect third-party services (like QuickBooks), we may receive data from those services as necessary to provide the integration
• Payment Processors: We receive transaction confirmation information from our payment processors

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide and Maintain the Service

• Create and manage your account
• Process and manage rentals, invoices, and payments
• Enable dispatch and scheduling features
• Facilitate team collaboration and access management
• Provide customer support

3.2 To Improve and Develop the Service

• Analyze usage patterns to improve user experience
• Develop new features and functionality
• Debug and fix issues
• Conduct research and analysis

3.3 To Communicate with You

• Send transactional emails (invoices, confirmations, receipts)
• Provide customer support and respond to inquiries
• Send service-related announcements and updates
• Send promotional communications (with your consent, where required)

3.4 For Security and Compliance

• Detect and prevent fraud and abuse
• Enforce our Terms of Service
• Comply with legal obligations
• Protect the rights and safety of users

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who provide services on our behalf, including:

• Cloud hosting: To store and process your data
• Payment processing: Stripe processes payments securely
• Authentication: Clerk manages user authentication
• Analytics: To understand Service usage
• Email services: To send transactional emails

4.2 Third-Party Integrations

When you enable integrations (such as QuickBooks), we share data with those services as necessary to provide the integration functionality. Your use of these integrations is subject to the privacy policies of those third parties.

4.3 Within Your Organization

Information you enter into the Service is accessible to other members of your organization based on their role and permissions.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, such as subpoenas, court orders, or government requests.

4.5 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your information.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Regular security assessments and monitoring
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Service. We also retain and use your information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Support business operations

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You can access and export your data through the Service's built-in export features. You may also request a copy of your personal information by contacting us.

7.2 Correction

You can update your account information directly within the Service. If you need assistance correcting other information, please contact us.

7.3 Deletion

You can request deletion of your account and personal information. Note that we may retain certain information as required by law or for legitimate business purposes.

7.4 Marketing Opt-Out

You can opt out of promotional emails by clicking the unsubscribe link in any marketing email or by contacting us. Note that you will continue to receive transactional emails related to your account.

7.5 Cookie Preferences

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for the Service to function properly (authentication, security)
• Performance Cookies: Help us understand how users interact with the Service
• Functional Cookies: Remember your preferences and settings

Most web browsers are set to accept cookies by default. You can usually modify your browser settings to remove or reject cookies, but this may affect certain features of the Service.

9. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe we have inadvertently collected such information, please contact us.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out: We do not sell personal information. If this changes, you will have the right to opt out
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, please contact us using the information below.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on your consent, contractual necessity, legitimate interests, or legal obligations
• Right to Object: You can object to processing based on legitimate interests
• Right to Restrict: You can request restriction of processing in certain circumstances
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us using the information below.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. If we make material changes, we will provide additional notice, such as via email or a prominent notice within the Service. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

For data protection inquiries, you may also contact our Data Protection contact at: [email protected]