Privacy Policy

Effective date: November 11, 2025

This Privacy Policy explains how MakeBox AI (“we”, “us”, “our”) collects, uses, shares, and protects information when you visit our websites, use our products (including AI voice/chat assistants, CRM, and automations), or interact with us by phone, SMS, email, or social media. If you have questions, contact [email protected].

What we collect

  • Contact & account data: name, email, phone number, business name, role, password hashes.
  • Communications: messages you send in forms, chat, SMS, social DMs; call metadata; call recordings and AI-generated summaries (where enabled and lawful).
  • Transactional data: subscriptions, invoices, payment status (payments processed by our PCI-compliant provider; we don’t store full card data).
  • Usage & device data: IP, browser/OS, pages viewed, actions in app, referral URLs, approximate location, cookies or similar identifiers.
  • Lead & customer data you upload: contacts, tags, conversation history, booking details that you choose to store in the CRM.

If required by law, we’ll ask for consent before recording calls or collecting sensitive fields.

How we use information

  • Provide and improve our services (voice/chat agents, CRM, automations, analytics).
  • Respond to inquiries, route calls/messages, schedule bookings, and generate conversation summaries.
  • Send service communications (notifications, confirmations, security, billing).
  • Send marketing emails/SMS only with appropriate consent; you can unsubscribe anytime.
  • Monitor performance, debug issues, prevent fraud/abuse, and meet legal obligations.

Cookies & tracking

We use cookies and similar technologies (e.g., local storage, pixels) for authentication, preferences, analytics, and marketing. You can control cookies in your browser settings; disabling some cookies may affect functionality.

AI assistants & recordings

Our AI voice/chat assistants process content of calls and messages to generate responses and summaries. Where call recording is enabled, audio and transcripts may be stored and accessible to your team for quality, training, or compliance. You are responsible for obtaining any notices/consents required for your jurisdiction.

How we share information

  • Service providers (processors): hosting, telephony/SMS, email delivery, analytics, payments, support tools—only as needed to operate the service.
  • Business transfers: in a merger, acquisition, or asset sale, data may transfer subject to this Policy.
  • Legal & safety: to comply with law, enforce terms, or protect rights, safety, and security.

We do not sell personal information as defined by applicable U.S. privacy laws.

Marketing preferences

  • Email: click “Unsubscribe” in any marketing email or write to [email protected].
  • SMS: reply STOP to opt out; reply HELP for help. Message/data rates may apply.

We maintain a suppression list to respect your choices.

Your rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your data; to opt out of certain processing; and to appeal a denial. To exercise rights, email [email protected].

  • California (CPRA): rights to know, delete, correct, limit use of sensitive data, and opt out of “sharing” for cross-context behavioral advertising.
  • EEA/UK (GDPR): rights to access, rectify, erase, restrict, portability, and object; lawful bases include performance of contract, legitimate interests, consent, and compliance.

Data retention & security

We retain personal data for as long as necessary to provide the services and fulfill the purposes above, then delete or anonymize it unless longer retention is required by law. We use administrative, technical, and physical safeguards appropriate to the risk. No system can be 100% secure; please use strong passwords and enable available protections.

International transfers

If data is transferred across borders, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) where required by law.

Children’s privacy

Our services are not directed to children under 13 (or under the age required by local law). We do not knowingly collect such data; if you believe we have, contact us for deletion.

Third-party links

Our sites may link to third-party websites or services. Their privacy practices are governed by their own policies.

Changes to this Policy

We may update this Policy from time to time. The “Effective date” reflects the latest version. Material changes will be communicated via the website or email.

Contact

For privacy inquiries or requests, email [email protected].

© 2025. MakeboxAI. All rights reserved.