Privacy policy
Last updated 13 October 2026
Capbox, at capbox.ai, lets you connect your accounts and give AI agents limited, revocable access to them without handing over your passwords. This policy says what Capbox keeps, why, who else sees it, and how to have it removed. Questions go to support@capbox.ai.
What Capbox keeps
- The waitlist: if you join it, your email address, until you are invited or ask us to take it off. We use it only to send you your invite.
- Your account: your name, your email address, a hash of your password (never the password itself), and the orgs you belong to.
- Your keys: for each account you connect, its name, the service, the account's address, and its credentials (OAuth tokens, API keys or other secrets). Credentials are encrypted with a master key that is kept apart from the database, and are used only to make the requests you approved.
- What you make: proxies (the operations a cap offers, and the program behind them), caps, boxes and their members, your agents and the permissions you gave them, and your approvals. A proxy may keep a small memory between uses, such as the ID of an event it booked. That memory stays with its cap, encrypted.
- The audit trail: a record of each use. It shows which cap or agent was used, which operation, when, whether it was allowed and whether it worked, and how much was sent. When an agent connects to a cap, the record also keeps the agent's name, its network address and its user agent. The audit trail never keeps the content that services sent back. Its entries are deleted after 90 days.
- Server logs: one line per request, with the path (cap tokens cut short), the response status, how long it took, and the browser's or agent's name. They are kept briefly and overwritten as new ones arrive.
- One cookie, to keep you signed in. Capbox uses no analytics, advertising or tracking cookies, and its pages load no outside scripts or fonts.
How Capbox uses it
Only to run Capbox for you: to sign you in, to make the requests your caps and agents are allowed to make, to show you what happened, and to keep the service secure. Capbox does not sell your data, show you ads, or use your data to train AI models.
Google user data
When you connect a Google account as a key, Google shows you what Capbox asks for, and you decide. Depending on the kind of key, that is:
- Google Workspace: your Google account's email address, so Capbox can show which account a key is; sending mail as you; your free and busy times; and reading, adding and changing your calendar events. If you allow it, also Google Sheets, and the Drive files that Capbox creates or that you open with it.
- Google's Workspace servers (Gmail, Calendar, Drive, Docs, Sheets, Slides, Chat and Contacts): the reading and writing that each server lists when you connect it.
How Capbox uses Google user data:
- Only to run the operations you approved in a proxy, when you, your agent, or someone holding a cap you made asks for one. Capbox does not look through your Google data on its own.
- What an operation returns goes to whoever asked for it: you, or the person and agent holding your cap. Capbox does not keep it, apart from anything the proxy keeps in its memory.
- Your Google tokens are encrypted at rest. Agents, AI models and the people you share caps with never see them.
- The content of your Google data (your mail, events, files, chats and contacts) is never sent to an AI model. The built-in authoring agent is told which keys you have, including each key's account address, so that it can pick the right one.
- Capbox does not use Google user data to develop, improve or train AI or machine learning models, and does not transfer it to anyone else for that purpose.
- Capbox does not sell Google user data, use it for advertising, or use it to decide anyone's creditworthiness.
- The people who run Capbox do not read your Google data, with three exceptions: you ask them to, for example to help with a problem; it is needed for security, such as investigating abuse; or the law requires it.
- You can remove a key at any time. Capbox then deletes the credentials it holds for it, and the caps that use it stop working. You can also revoke Capbox's access at https://myaccount.google.com/permissions.
Capbox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
The same rules apply to the other services you connect, such as Microsoft 365.
AI models
Some features use an AI model. Capbox reaches models through OpenRouter (openrouter.ai), which passes each request to the model's provider:
- The built-in authoring agent, when you ask it in your own words to write a proxy. It gets your request, and the name, service and account address of each of your keys.
- The connection assistant, when you ask it to connect a service. It gets your conversation with it, the public documentation it reads, and what the service offers, with secrets removed.
- Questions about a cap. The model gets the question and the cap's public description, never your data or your credentials.
Capbox never sends credentials to a model.
Who else sees your data
- The people and agents you share with. Whoever holds a cap can run the operations you approved and gets what they return. Members of a box can use the caps put in it, and members of a team org share its keys, proxies and caps.
- Service providers who run Capbox for us: DigitalOcean (servers), OpenRouter and the model providers it uses (for the features above), Cloudflare (DNS) and Proton (email: the invites we send, and support). Each gets only what it needs to provide its service.
- The services you connect, which receive the requests your caps make, under their own privacy policies.
- Others, when the law requires it, or when it is needed to protect people from harm.
Nobody else: Capbox does not sell or rent your data to anyone.
Security
Traffic to Capbox is encrypted with HTTPS. Credentials, caps' memory and your conversations with the connection assistant are encrypted with a master key that is not stored in the database, and the database itself is kept on encrypted storage. Each org's data is kept apart from every other's, every use is audited, and a cap can be revoked at once. No system is perfectly secure: if a breach affects your data, we will tell you.
Keeping and deleting
Your data is kept while your account is open. Removing a key deletes its credentials, and revoking a cap stops it at once. Audit entries are deleted after 90 days. To close your account and have your data deleted, write to support@capbox.ai. We will delete it within 30 days.
Children
Capbox is not meant for children under 16.
Changes
If this policy changes, the new version will appear here with a new date. If a change matters, we will email account holders before it applies.