Privacy Policy
Last updated: March 24, 2026
Introduction
Boxed ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
Information We Collect
We collect information that you provide directly to us, including:
- Personal identification information (name, email address, date of birth)
- Contact information (address, phone number)
- Government-issued identification documents for verification purposes
- Social Security Number (for tax reporting purposes, US residents only)
- Payment information (bank account details, PayPal information)
- Task completion data and performance metrics
How We Use Your Information
We use the information we collect for various purposes, including to:
- Verify your identity and eligibility to participate
- Process payments and issue tax documents
- Provide, maintain, and improve our services
- Send you technical notices, updates, and support messages
- Respond to your comments, questions, and customer service requests
- Monitor and analyze trends, usage, and activities
- Detect, investigate, and prevent fraudulent transactions and abuse
Data Security
We implement appropriate technical and organizational security measures to protect your personal information. All data is encrypted using 256-bit SSL encryption during transmission. Your sensitive information, including SSN and identification documents, is stored using industry-standard encryption methods. We maintain SOC 2 Type II certification and undergo regular security audits.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Tax-related information is retained for 7 years in compliance with IRS regulations. You may request deletion of your account and associated data at any time, subject to legal retention requirements.
Sharing Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- With service providers who assist in our operations (payment processors, identity verification services)
- To comply with legal obligations or respond to lawful requests
- To protect our rights, privacy, safety, or property
- In connection with a merger, acquisition, or sale of assets
Your Rights
Depending on your location, you may have the following rights:
- Access and receive a copy of your personal data
- Rectify inaccurate personal data
- Request deletion of your personal data
- Object to or restrict processing of your data
- Data portability
- Withdraw consent at any time
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy, including Standard Contractual Clauses approved by the European Commission.
Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at: