PRIVACY POLICY

This Privacy Policy explains how Gangbox Technologies LLC ("Gangbox Technologies LLC," "we," "us," or "our") collects, uses, stores, and shares information when you use the Gangbox platform at app.gangbox.io and gangbox.io (collectively, the "Platform"). By using the Platform, you agree to the practices described in this policy.

Questions or requests? Contact us at legal@gangbox.io.

1. Information We Collect

1a. Information You Provide Directly

When you create an account or use the Platform, we collect:

• Account information — your name, email address, job title, and company name
• Profile information — your role within your organization and any project-related details you enter
• Uploaded documents — insurance certificates (COIs), contracts, subcontractor information, contact details, project documents, and any other files you upload to the Platform
• Contact and directory information — names, phone numbers, email addresses, and company affiliations of subcontractors, vendors, and project team members that you enter or import
• Communications — messages you send through the Platform, including chat interactions with Gus, our AI assistant
• Feedback — any feedback, bug reports, or suggestions you submit during the beta period

1b. Information Collected Automatically

When you use the Platform, we automatically collect limited technical information necessary to operate the service:

• Authentication data — session tokens and login timestamps managed through Supabase Auth
• Usage data — pages visited, features used, and actions taken within the Platform
• Device and browser information — browser type, operating system, and IP address
• Error logs — technical error information used to identify and fix bugs

1c. Information We Do Not Collect

• We do not use third-party analytics tools (such as Google Analytics)
• We do not track your activity across other websites
• We do not collect payment information (no fees are charged during the beta period)
• We do not collect precise geolocation data

2. How We Use Your Information

We use the information we collect to:

• Provide the Platform — operate, maintain, and improve Gangbox's features and functionality
• Process uploaded documents — analyze documents using AI to extract data, assess compliance, and generate outputs on your behalf
• Authenticate users — verify your identity and manage your session securely
• Send transactional emails — deliver account-related notifications, invitation emails, and automated summaries (such as COI status reports) via Resend
• Improve the product — understand how features are used during the beta period to prioritize improvements
• Respond to requests — address support inquiries, data requests, and account deletion requests
• Comply with legal obligations — respond to lawful legal process or regulatory requirements

What We Do Not Do With Your Data

• We do not sell your personal information to any third party, ever.
• We do not use your uploaded documents to train our own AI models.
• We do not share your data for advertising or marketing purposes.
• We do not use your data for any purpose beyond operating and improving the Platform.

3. AI Processing and Uploaded Documents

Gangbox uses artificial intelligence to process documents you upload — including insurance certificates, contracts, and project files. This section explains how that processing works.

• When you upload a document for AI analysis, the content of that document is transmitted to Anthropic via their API for processing.
• Anthropic's API does not use submitted content for AI model training. Data submitted through the Anthropic API is automatically deleted within 7 days per Anthropic's data retention policy. You can review Anthropic's privacy practices at anthropic.com/legal/privacy.
• AI-generated outputs are stored within your Gangbox account so you can review and act on them.
• You are responsible for ensuring you have the right to upload documents that may contain information about other parties — including subcontractors, owners, architects, and consultants.

4. How We Share Your Information

We share information only in the following limited circumstances:

4a. Third-Party Service Providers (Subprocessors)

We use the following service providers to operate the Platform. Each provider processes data only as necessary to deliver their specific service and is subject to data protection obligations:

4b. Legal Requirements

We may disclose your information if required to do so by law, court order, or other governmental authority, or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of Gangbox Technologies LLC
• Prevent or investigate possible wrongdoing in connection with the Platform
• Protect the personal safety of users or the public

4c. Business Transfers

If Gangbox Technologies LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Platform before your information becomes subject to a different privacy policy.

4d. With Your Consent

We may share information in other ways if you give us explicit consent to do so.

5. Data Storage and Security

• All data is stored in the United States using Supabase (PostgreSQL) and UploadThing.
• Data is encrypted in transit using TLS/HTTPS on all connections.
• Data is encrypted at rest by our infrastructure providers.
• Access to your data within the Platform is controlled by role-based permissions — users only see data they are authorized to access.
• We use industry-standard security practices appropriate for a beta-stage platform.

What We Cannot Promise

• No system is perfectly secure. We cannot guarantee that unauthorized third parties will never be able to defeat our security measures.
• If a data breach occurs that affects your information, we will notify you in accordance with applicable law.
• We have not yet obtained SOC 2 certification. Enterprise security certifications are planned for a future stage of the product.

6. Data Retention

• Upon account deletion, we will delete or anonymize your personal data within a reasonable period, except where retention is required by law.
• Some anonymized or aggregated data may be retained for product improvement purposes after account deletion.

7. Your Rights and Choices

You have the following rights with respect to your personal information:

• Access — You can request a copy of the personal information we hold about you.
• Correction — You can request that we correct inaccurate information about you.
• Deletion — You can request that we delete your account and associated personal data. Contact us at legal@gangbox.io.
• Restriction — You can ask us to stop processing your data in certain circumstances.
• Portability — You can request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, email us at legal@gangbox.io. We will respond within a reasonable timeframe. We may need to verify your identity before processing your request.

8. Cookies and Session Data

• Gangbox uses session cookies to maintain your authenticated login state. These are managed by Supabase Auth and are necessary for the Platform to function.
• We do not use advertising cookies, tracking pixels, or third-party cookies for analytics.
• You can configure your browser to block cookies, but doing so may prevent you from logging in or using the Platform.

9. Children's Privacy

• The Gangbox platform is intended for use by business professionals and is not directed at children under the age of 18.
• We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us at legal@gangbox.io and we will delete it promptly.

10. Changes to This Privacy Policy

• We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
• When we make material changes, we will notify you by updating the effective date at the top of this page and, where appropriate, by notifying you within the Platform or by email.
• Your continued use of the Platform after any update constitutes your acceptance of the revised policy.
• The current version of this Privacy Policy is always available at gangbox.io/privacy.

11. Contact Us

For privacy questions, data requests, or to exercise your rights:

Gangbox Technologies LLC Email: legal@gangbox.io Website: gangbox.io

We take privacy inquiries seriously and will respond promptly.

Gangbox Technologies LLC — AI Built by Builders
This Privacy Policy applies to the Gangbox beta platform. It will be updated when Gangbox transitions to commercial availability.