Privacy Policy

narubox™ works by sending information about your business to AI services, so it matters that you know exactly what leaves our servers and where it goes. This policy says so plainly.

1. What we collect

Account information

Your name or username, email address, password (stored only as a salted hash — never in readable form), and the business details you give us: company name, category and city.

Content you upload

The documents and images you upload, the text and images extracted from them, and the structured information we derive — the entities, relationships and knowledge packs built from your files.

Usage information

Pages viewed, approximate country derived from IP address, referring site, browser type, and timestamps. If you receive our newsletter, we record which links you click so we can tell what our subscribers actually find useful.

Payment information

Handled entirely by Stripe. We receive a subscription status, plan and customer reference. We never see or store your card number.

Sign-in with Google

If you use Google to sign in, we receive your email address, basic profile information and a token that lets us confirm your identity. We do not receive your Google password and we do not access your Google files or mail.

2. How we use it

• To run the service: process your documents, build knowledge packs, supply them to AI assistants, and generate your company page.
• To bill you and manage your subscription.
• To send transactional email — email verification, password reset, receipts, and notices about your account.
• To send our newsletter, if you have not opted out. Every newsletter has an unsubscribe link, and transactional email is unaffected by opting out.
• To measure how AI assistants answer questions in your category.
• To keep the service secure, debug faults and understand aggregate usage.

We do not sell your personal information, and we do not sell placement in our rankings.

3. Who we send it to

These are the third parties involved in providing narubox. Each handles data under its own privacy policy.

• OpenAI, Anthropic, Google (AI services) — receive your uploaded content and the structured information derived from it, so their assistants can retrieve accurate information about your business. This is the core function of the product.
• Stripe — payment processing and subscription billing.
• Google Analytics — aggregate website usage statistics.
• Our email provider — delivery of the messages described above.
• Our hosting provider — operates the servers the service runs on.

We may also disclose information where legally required, to protect our rights or someone's safety, or to a successor if the business is transferred — in which case we will say so before your information becomes subject to a different policy.

4. What becomes public

Your company page on narubox.com is public by design, so search engines and AI systems can find it. It contains business information drawn from what you uploaded. It is not intended to contain personal information, and you should not upload personal information expecting it to stay private. You can ask us to correct or unpublish the page at any time, though we cannot recall copies already retrieved by others.

5. Cookies and analytics

We use a session cookie to keep you signed in and a security token to protect forms — both are necessary for the site to function. We use Google Analytics to understand aggregate traffic. You can block cookies in your browser, but signing in will not work without the session cookie.

6. How long we keep it

• Account and company information — while your account is open.
• Uploaded documents and derived knowledge — while your account is open, or until you delete them. Each business has its own isolated workspace: your documents are never shared with another customer, and we do not use them to build anything for anyone else.
• Assistant check records — the questions we put to AI assistants about your business and the answers they gave, kept while your account is open so you can see how those answers change over time.
• Activity log — the record of uploads, answers and checks shown on your dashboard. It is derived from the records above rather than stored separately, so deleting the underlying item removes it from the log too.
• Billing records — as long as tax and accounting law requires, typically seven years.
• Usage and analytics data — in aggregate, indefinitely; the page-view records that identify a visit are kept for a limited period.

When you delete content or close your account we remove it from our systems and stop supplying it to AI services. We cannot delete it from third-party AI systems that already received it — that data is subject to their retention practices, which is why section 4's warning matters.

7. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy in a portable form, object to certain processing, or withdraw consent. You will not be treated differently for exercising these rights.

To exercise any of them, email aiswingx.com@gmail.com from the address on your account. We respond within 30 days.

8. Security

The site is served over HTTPS. Passwords are stored as salted hashes. API keys and integration credentials in our admin settings are encrypted at rest. Access to production data is limited to those who need it. No system is perfectly secure; if a breach affects your information we will notify you and any required authority without undue delay.

9. Where data is processed

narubox serves businesses worldwide. Our servers and the providers listed in section 3 are located primarily in the United States, so wherever you use the service from, your information is transferred to and processed in the United States — which may have different data protection laws than your own country. By using narubox you consent to that transfer.

10. Children

narubox is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes and contact

We will update this policy as the service changes — particularly if we add an AI provider or another processor. Material changes will be announced by email or in the product before taking effect. The date at the top shows the current version.

Privacy questions: aiswingx.com@gmail.com.