Legal

Privacy Policy

Last updated: July 16, 2026
This policy explains what information GroupBox AI collects, why we collect it, and how you can manage it.

1. Information we collect

We collect information you provide directly and information generated by your use of GroupBox.

  • Account information — name, email address, company, and authentication details.
  • Workspace content — the projects, requirements, decisions, code context, tests, and marketing content you and your AI agents create (your "Project Memory").
  • Usage data — features used, pages visited, and interactions with agents, used to improve the product.
  • Device and log data — IP address, browser type, and timestamps for security and diagnostics.

2. How we use your information

We use your information solely to provide and improve GroupBox. Specifically:

  • To operate your workspace and power your AI agents with your project's context.
  • To provide support, respond to enquiries, and send essential service communications.
  • To improve product quality, reliability, and security.
  • To send optional product updates — you can unsubscribe at any time.

3. Your Project Memory is yours

The content of your Project Memory belongs to you. We do not sell your data, and we do not use your workspace content to train models made available to other customers. You can export your Project Memory at any time, and deleting your workspace permanently removes its contents from our systems within 30 days.

4. Sharing with third parties

We share data only with service providers necessary to operate GroupBox — such as cloud hosting and AI model providers — under contracts that limit their use of your data to providing services to us. We may disclose information if required by law.

5. Data retention and deletion

We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us; we complete deletion within 30 days, except where a longer period is required by law.

6. Security

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production systems is limited, logged, and reviewed. See our Security page for details.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, email sales@groupbox.co.

8. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or in-product notice before they take effect.

Questions?

If you have any questions about this document, contact us at sales@groupbox.co or write to us at GroupBox AI, Hyderabad, India.