BuyBox

Privacy Policy

Last updated: January 14, 2026

1. Introduction

BuyBox ("we," "our," or "us") operates a business intelligence platform designed to help acquisition teams discover, evaluate, and connect with small and medium-sized businesses (SMBs). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, browser extensions, and related services.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, phone number, company name, and password when you register.
  • Company Information: Your company details, representative information, return address, and communication preferences for outreach campaigns.
  • Communication Content: Letter templates, email drafts, and notes you create for outreach.
  • Payment Information: Billing details processed through our third-party payment processors.

2.2 Information We Collect Automatically

  • Usage Data: Pages visited, features used, search queries, and interaction patterns.
  • Device Information: Browser type, IP address, device identifiers, and operating system.
  • Cookies: Session cookies and analytics cookies to improve your experience.

2.3 Business Data We Aggregate

Our platform aggregates publicly available business information from various sources including:

  • State corporation registries and business filings (e.g., Florida Sunbiz)
  • Public business directories (Google Places, Yelp)
  • Publicly available website information
  • Government licensing databases
  • Corporate officer and principal information from public filings

2.4 Chrome Extension Data

We offer browser extensions that collect data to enhance our platform:

  • BuyBox Sync Extension: When you activate the extension on a website, we collect publicly visible information from that webpage including business name, contact details, services, and other displayed content. This data is sent to our servers to enrich business profiles.
  • LinkedIn Sales Navigator Extension: When you use LinkedIn Sales Navigator with our extension enabled, we capture search results and profile data that you view, including names, titles, company information, and profile pictures. This data is used to enhance contact information within our platform. We only collect data from pages you actively visit.

2.5 Gmail Add-on Integration

BuyBox offers a Gmail Add-on that creates email drafts directly within Gmail. This add-on uses only non-sensitive OAuth scopes:

  • We use the gmail.addons.current.action.compose scope to create draft emails — this only works when you actively interact with the add-on in Gmail
  • We use the userinfo.email scope to identify your email address
  • We never send emails automatically — you must manually click "Create Draft" in the add-on and then send from Gmail
  • We never read your existing emails, contacts, or other Gmail data
  • The add-on stores your BuyBox API token locally in your browser; you can disconnect at any time
  • Draft creation only happens when you are actively using Gmail with the add-on open

3. How We Use Your Information

  • Provide and maintain our platform services
  • Process and fulfill outreach campaigns (letters, emails)
  • Generate business analytics and enriched company profiles
  • Create email drafts in your connected Gmail account for your review
  • Communicate with you about your account and our services
  • Improve our platform and develop new features
  • Comply with legal obligations
  • Prevent fraud and ensure platform security

4. Information Sharing

We may share your information with:

  • Service Providers: Third parties who assist in operating our platform, including:
    • Google (Gmail API for draft creation)
    • Letter fulfillment partners
    • Cloud hosting providers (Google Cloud Platform)
    • Database services (PostgreSQL, Redis)
  • Legal Requirements: When required by law, subpoena, or legal process.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal information to third parties.

5. Data Security

We implement industry-standard security measures including:

  • Encryption in transit (TLS/HTTPS)
  • Encryption at rest for sensitive data including OAuth tokens
  • Access controls and authentication
  • Regular security reviews

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account information for as long as your account is active. Communication logs and outreach history are retained for 7 years for compliance purposes. You may request deletion of your data subject to legal retention requirements.

Gmail OAuth tokens are retained until you disconnect your Gmail account or revoke access through Google's security settings.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Export your data
  • Opt out of marketing communications
  • Withdraw consent for data processing
  • Disconnect third-party integrations (Gmail, Chrome extensions)

8. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information.

9. Children's Privacy

Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Browser Extension Privacy

Our Chrome extensions operate as follows:

  • Permissions: Extensions only activate on specific websites (your current tab for BuyBox Sync, LinkedIn for Sales Navigator)
  • Data Transmission: Collected data is transmitted securely to our servers over HTTPS
  • Local Storage: Extensions may store authentication tokens locally in your browser
  • Uninstallation: Removing an extension stops all data collection; previously collected data remains on our servers unless you request deletion

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

BuyBox
Email: Leon@try-buybox.com