Privacy Policy
Last updated: October 27, 2026
This policy explains how BoxedIn LLC ("BoxedIn") handles personal information in the BoxedIn apps, website, and scan pages. We collect only what each feature needs. We may share area-level patterns, like how often double parking happens in a neighborhood. We never share or sell records about you.
What we collect
| What we collect | Why | How long we keep it |
|---|---|---|
| Legal name exactly as on your ID, phone number, email | Your account, sign-in, and sending you alerts | While your account is open |
| Identity check result | Confirm you are a real person | Pass or fail only; ID images are never stored |
| Vehicle registration photo | Confirm the vehicle is yours | Deleted right after the check. We keep pass or fail and your plate number (encrypted), never the address on it |
| Vehicle year and type | Your vehicle profile and anonymous reports | While your account is open |
| Home ZIP code | Place you in the right city and area | While your account is open |
| Shipping address | Mail your sticker | Deleted 30 days after delivery |
| Payment status | Know you paid. Apple, Google, and our payment processor handle your card; we never see the full number | While your account is open, plus any period tax law requires |
| Alerts and replies | Deliver alerts and run the service | Details deleted after 90 days; only anonymous counts kept |
| Missed alerts | Good Neighbor rules | Drop off after 90 days |
| Safety reports | Keep people safe | Until resolved, plus any period the law requires |
| Device and app data (push token, app version, crash logs) | Deliver notifications and fix problems | While your account is open |
| Survey answers (how you heard about us, ratings, why you canceled) | Improve BoxedIn | Kept as anonymous totals |
| Your consents (Terms, texts, marketing) | Prove what you agreed to and when | While your account is open, plus any period the law requires |
Automatic backups are kept for 30 days, then overwritten.
How we use and share it
How we use your information
- Run the service: activate stickers, deliver alerts and reminders, and pass replies through our private relay.
- Keep people safe: review safety reports, stop fake alerts, and enforce the Community Guidelines.
- Billing: confirm payments and send renewal reminders.
- Support: answer your questions.
- Improve BoxedIn: study anonymous totals, like how many alerts are answered in each neighborhood.
- Marketing and offers: we may email you offers, including partner offers that BoxedIn sends itself, unless you turn this off in Settings. We never give your contact details to partners. Marketing push notifications and texts are sent only if you opt in.
What other users see
People who scan your sticker never see your name, phone number, plate, or photo. They see only that the alert was sent, your preset reply, and your Good Neighbor badge if you have one.
Who we share it with
We share personal information only as described here. We never share your plate, vehicle details, registration check, alert history, or safety reports with advertisers or partners. We share with:
- Service providers that run parts of BoxedIn for us, under contracts that limit how they use it: hosting and database, text messages, push notifications, app stores, subscription management, payments, and sticker printing and mailing.
- Our support chat provider, which receives only an anonymous support reference number and your language, never your account or vehicle details.
- Police or courts when the law requires it, or when needed to protect someone's safety.
- A buyer, if BoxedIn is ever sold or merged. This policy would still apply to your information.
Partners (like buildings or city groups) receive only neighborhood totals, never records about a person.
If you scan without an account
You don't need an account to send an alert. When you scan a sticker, we collect:
- The alert itself: which sticker, the time, and the preset message you chose. Deleted after 90 days, like all alert details.
- A device identifier, used only to stop repeat or fake alerts (no more than 3 alerts per sticker per hour from one device).
- Your general area, only if you say yes. We ask, "Share your general area to help us map double parking?" If you agree, we keep only the neighborhood or ZIP, never exact GPS, and never linked to the owner.
- A safety report, if you file one.
The owner never sees who you are. We don't ask for your name or phone number to send an alert.
Your choices and rights
Everything below lives in Settings › Privacy Center in the app, so you never have to email us to use it.
- See and download your data: get a copy of what we hold about you.
- Update it: edit your email, phone number, and vehicle details anytime. Your name must match your ID exactly, so it can only be changed through support with a valid ID showing the new name.
- Delete your account: removes your personal information, generally within 90 days. We keep only anonymous counts, and anything the law requires us to keep, such as records of an open safety report.
- Marketing: emails are on unless you turn them off. Marketing push notifications and texts stay off unless you turn them on.
- Do Not Sell or Share: BoxedIn does not sell or share your personal information. The Privacy Center still includes this switch so you can confirm it, and on our website we honor the Global Privacy Control signal from your browser.
- Text alerts: on or off, as long as push notifications stay on (see the Terms).
- Phone permissions (camera for activating stickers, notifications): the app asks when each is first needed. Change them anytime in your iPhone or Android settings.
Your state privacy rights: depending on where you live, you may have the right to know what we've collected, get a copy, correct it, delete it, opt out of its sale or sharing and of targeted ads, and appeal our decision. Use the Privacy Center or email support@boxedinnyc.com. We'll respond within 45 days, as the law requires.
Security, age, changes, contact
- Security: phone and plate numbers are encrypted. Staff access needs two-factor sign-in, and every time staff views personal information, it's logged. No system is perfectly secure. If a breach affects you, we'll tell you as the law requires.
- Age: BoxedIn is for adults 18 and older. We don't knowingly collect information from anyone under 18. If we learn we have, we delete it.
- Changes: if we make a significant change, we'll tell you in the app or by email before it takes effect.
- Contact: support@boxedinnyc.com, or by mail at BoxedIn LLC, c/o Northwest Registered Agent LLC, 418 Broadway, Ste N, Albany, NY 12207.