Privacy Policy

Who we are

BBoxML is operated by SXRATCH LTD trading as BBoxML. This policy explains how we collect, use, store, and share personal data when you use the website and the BBoxML app.

If you have privacy questions or want to exercise your data rights, contact us at support@bboxml.com.

What we collect

The data we collect depends on how you use the service. We only collect the categories of data needed to run the website, the app, billing, support, and AI-assisted labelling.

• Account and profile data such as your name, email address, authentication identifiers, plan details, and account settings.
• Uploaded content such as images, annotations, classes, dataset versions, and export files.
• Billing and customer records such as subscription status, invoices, Stripe customer references, and credit balances.
• Support communications you send to us by email.
• Functional browser storage used for things like pricing-region selection, onboarding continuity, and post-sign-in redirect state.

How we use personal data

We use personal data only to provide and support BBoxML. Uploaded images and annotations are not used to train BBoxML models.

• To create and manage your account.
• To store projects, images, labels, exports, and usage records.
• To process payments, subscriptions, and credit-pack purchases.
• To provide AI-assisted labelling features you choose to use.
• To respond to support, billing, and privacy enquiries.
• To protect the service, prevent abuse, and enforce our terms.

Legal bases for processing

For UK and EU users, our main legal bases are contract, legitimate interests, legal obligation, and consent where applicable.

• Contract: we process data so we can provide the service you asked us to provide.
• Legitimate interests: we use limited data to secure, maintain, and improve the service in a proportionate way.
• Legal obligations: we keep records where required for accounting, tax, fraud-prevention, or legal compliance purposes.
• Consent: where consent is required by law, we rely on it.

AI processing

When you use AI-assisted labelling, relevant image and class data may be processed by third-party AI providers so the feature can return labels to your account.

We use that data only to provide the requested AI feature. Uploaded images and annotations are not used to train BBoxML models.

Sharing and processors

We may use third-party processors to help us run BBoxML. They may handle personal data on our behalf for authentication, hosting, storage, payments, and AI processing.

• Authentication providers.
• Cloud hosting, storage, and database providers.
• Payment processors.
• AI-processing providers used to run labelling features.
• Professional advisers or authorities where required by law.

Retention

We keep account and project data for as long as your account remains active and for a reasonable period afterwards where needed for backups, disputes, security, or legal compliance.

Billing and tax records may be kept for longer where the law requires it. Support messages may also be retained where needed to resolve issues or keep an audit trail.

International transfers

Your data may be processed outside the UK or EEA, including in countries where some of our service providers operate. Where required, we rely on appropriate safeguards for those transfers.

Your rights

To exercise your rights, email support@bboxml.com. We may need to verify your identity before acting on a request.

• Ask for access to the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete data where deletion rights apply.
• Object to or restrict certain processing in some cases.
• Ask for a portable copy of certain data.
• Complain to your local data protection authority if you think your rights have been infringed.

Cookies and similar technologies

The public website uses Google Analytics only after you accept analytics tracking through the site banner. We use that measurement to understand which public pages are useful and how visitors move through the marketing site and blog.

BBoxML also uses necessary browser storage and similar technologies for functional purposes, including remembering pricing-region selection, preserving onboarding continuity, storing post-sign-in redirect state, and saving your analytics consent choice.

Contact details

Controller: SXRATCH LTD trading as BBoxML.

Company Number: 17089605.

Address: Floor 3, Programme, All Saint's St, Bristol, BS12NB.

Privacy contact: support@bboxml.com.