Privacy Policy
Last updated 2026 · TagBox, a Hashtag brand platform.
What we store
Your TagBox username and name@tagbox.io address, the external email you verified with, the messages you send and receive on TagBox, and any files you attach. Nothing else.
Who can read your mail
Only you. Every message row is protected by row-level security keyed to your account, and attachments live in a private bucket that only issues short-lived signed links to their owner.
Jarvis and AI
Jarvis answers questions about how TagBox works. He only receives what you type into his chat window, plus the access permissions you grant in Jarvis settings. Your chat history is stored in your own browser and you can clear it at any time.
Verification emails
We send verification and account emails to the external address you provide. It is used for account recovery and verification only — never sold, rented or used for marketing.
How your email is stored
Messages, subjects, recipients and read state live in our managed database; attachments are stored in a private file bucket. Both are encrypted in transit (HTTPS/TLS) and at rest by the hosting provider. Mail you delete from Trash is removed permanently and is not archived elsewhere.
What we collect on our public pages
On the marketing and signup pages we record anonymous funnel events — page viewed, whether the signup form was started, submitted, completed or abandoned, plus the referring site. These events use a random per-tab id stored in your browser session. No cookies, no advertising networks, no cross-site tracking, and the events are never linked to your mailbox contents.
Exporting your data
You can request a full export of your account at any time from the support page: it includes your profile, every message in Inbox, Sent, Drafts, Archive and Trash, and all attachments, delivered as a downloadable archive. We aim to send exports within 7 days and never charge for them.
Retention and deletion
Mail is kept while your account is active. Anonymous funnel events are kept for 12 months and then discarded. Ask support to delete your account and we remove your profile, messages and attachments; verification records are cleared within 30 days.
Your controls
You can change your verification email, resend verification, clear Jarvis history, delete messages permanently from Trash, request a data export, and request account deletion by contacting support.