What we collect
- Contact & account data: name, email, phone number, business name, role, password hashes.
- Communications: messages you send in forms, chat, SMS, social DMs; call metadata; call recordings and AI-generated summaries (where enabled and lawful).
- Transactional data: subscriptions, invoices, payment status (payments processed by our PCI-compliant provider; we don't store full card data).
- Usage & device data: IP, browser/OS, pages viewed, actions in app, referral URLs, approximate location, cookies or similar identifiers.
- Lead & customer data you upload: contacts, tags, conversation history, booking details that you choose to store in the CRM.
If required by law, we'll ask for consent before recording calls or collecting sensitive fields.
How we use information
- Provide and improve our services (voice/chat agents, CRM, automations, analytics).
- Respond to inquiries, route calls/messages, schedule bookings, and generate conversation summaries.
- Send service communications (notifications, confirmations, security, billing).
- Send marketing emails/SMS only with appropriate consent; you can unsubscribe anytime.
- Monitor performance, debug issues, prevent fraud/abuse, and meet legal obligations.
Cookies & tracking
We use cookies and similar technologies (e.g., local storage, pixels) for authentication,
preferences, analytics, and marketing. You can control cookies in your browser settings;
disabling some cookies may affect functionality.
AI assistants & recordings
Our AI voice/chat assistants process content of calls and messages to generate responses
and summaries. Where call recording is enabled, audio and transcripts may be stored and
accessible to your team for quality, training, or compliance. You are responsible for
obtaining any notices/consents required for your jurisdiction.
Chrome Extension – Etsy AI Optimizer
-
What the extension accesses: The extension reads content from your Etsy listing pages
(titles, tags, descriptions) solely to generate AI-optimized suggestions at your explicit request.
This data is processed in real time and is never stored on MakeBox.ai servers.
-
Local storage only: The extension may store your preferences and session settings
locally in your browser using Chrome's built-in storage API. This data remains on your device
and is not transmitted to our servers.
-
No personal API keys required: All AI features are powered by MakeBox.ai's own
infrastructure using leading AI models (including GPT-4 and Claude). You do not need to provide
your own API keys. AI access is included in your subscription plan. Additional token usage beyond
your plan's included limits may be purchased separately through your account dashboard.
-
Third-party AI providers: To deliver AI-generated content, MakeBox.ai may process
your listing data through trusted AI providers (such as OpenAI and Anthropic) under strict
confidentiality agreements. Your data is never used to train third-party AI models.
-
Permissions explained: The extension requests access to Etsy pages solely to read
and autofill listing fields. No data is collected for advertising, tracking, or profiling purposes,
and no data is sold to third parties.
-
No background data collection: The extension does not collect, transmit, or monitor
any data outside of your explicit interactions with it on Etsy listing pages.
MakeBox.ai is not affiliated with or endorsed by Etsy, Inc. Use of the extension must comply
with Etsy's Seller Policy and Terms of Use.
How we share information
- Service providers (processors): hosting, telephony/SMS, email delivery, analytics, payments, support tools—only as needed to operate the service.
- Business transfers: in a merger, acquisition, or asset sale, data may transfer subject to this Policy.
- Legal & safety: to comply with law, enforce terms, or protect rights, safety, and security.
We do not sell personal information as defined by applicable U.S. privacy laws.
Marketing preferences
- Email: click "Unsubscribe" in any marketing email or write to [email protected].
- SMS: reply STOP to opt out; reply HELP for help. Message/data rates may apply.
We maintain a suppression list to respect your choices.
Your rights
Depending on your location, you may have rights to access, correct, delete, or
receive a copy of your data; to opt out of certain processing; and to appeal a denial.
To exercise rights, email [email protected].
- California (CPRA): rights to know, delete, correct, limit use of sensitive data, and opt out of "sharing" for cross-context behavioral advertising.
- EEA/UK (GDPR): rights to access, rectify, erase, restrict, portability, and object; lawful bases include performance of contract, legitimate interests, consent, and compliance.
Data retention & security
We retain personal data for as long as necessary to provide the services and fulfill the
purposes above, then delete or anonymize it unless longer retention is required by law.
We use administrative, technical, and physical safeguards appropriate to the risk. No
system can be 100% secure; please use strong passwords and enable available protections.
International transfers
If data is transferred across borders, we rely on appropriate safeguards (e.g., Standard
Contractual Clauses) where required by law.
Children's privacy
Our services are not directed to children under 13 (or under the age required by local law).
We do not knowingly collect such data; if you believe we have, contact us for deletion.
Third-party links
Our sites may link to third-party websites or services. Their privacy practices are governed
by their own policies.
Changes to this Policy
We may update this Policy from time to time. The "Effective date" reflects the latest version.
Material changes will be communicated via the website or email.