Privacy Policy

This Privacy Policy explains how PM in a Box collects, uses, stores, and shares information when you use this website, create an account, manage a subscription, connect third-party services, or launch a hosted workspace.

PM in a Box is designed to help customers provision and use a hosted workspace with optional integrations such as Google Workspace, Stripe billing, Fly.io-hosted runtime infrastructure, and WhatsApp-based interactions.

We collect information you provide directly, information created through your use of the service, and limited information received from integrated third parties.

• Account information, such as your name, email address, Clerk user identifier, and authentication metadata.
• Billing information, such as subscription status, Stripe customer identifiers, checkout session identifiers, and webhook event records.
• Integration information, such as Google Workspace access tokens or granted scopes needed to support features you enable.
• Workspace and operational information, such as deployment identifiers, machine URLs, sync timestamps, system logs, and service health data.
• User content and requests, such as prompts, task instructions, email queries, and other actions you direct the product to perform.

We use information to operate the service, provision workspaces, authenticate users, process payments, connect requested integrations, maintain reliability, and improve the product.

We may also use data to investigate abuse, prevent fraud, enforce platform security, comply with law, and communicate with you about your account or service status.

PM in a Box relies on third-party providers to deliver core functionality. These providers may process information on our behalf according to their own terms and privacy practices.

• Clerk for authentication and account access.
• Stripe for billing, checkout, subscription state, and payment webhooks.
• Google APIs for optional Workspace integrations that you explicitly authorize.
• Fly.io for hosting customer workspace infrastructure.
• LLM or messaging providers used to fulfill workspace features you enable.

When you launch a workspace, we may provision infrastructure and persistent storage associated with your account. That environment may process customer-specific data needed to deliver the features you request.

We aim to minimize the credentials and secrets placed on tenant infrastructure. For example, tenant machines should receive only customer-specific access tokens needed for enabled integrations and should not receive centralized OAuth client secrets or refresh tokens.

We retain information for as long as reasonably necessary to operate the service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of data and the services you use.

We use administrative, technical, and organizational safeguards intended to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You may disconnect optional integrations, manage your subscription status, or stop using the service at any time. You may also request deletion or export of account-related data, subject to legal, operational, and security constraints.

If you connected Google Workspace or similar services, you can revoke access through the relevant provider in addition to disconnecting the integration in PM in a Box.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date on this page.

If you have questions about this policy, contact the operator of the PM in a Box service through the support channel or business contact that provided access to this site.