Privacy Policy
In short: Softboxly does not store your photos on our servers. Your library stays on your device, or in your own Google Drive or Dropbox if you choose to link one. We do not sell your data, show ads, or use your photos to train AI.
1. What we handle
- Your product photos and settings. When you create a photoshoot, your photos, product name, size, setting description and text are sent to our server and on to AI services only long enough to create and check each shot. We do not keep them.
- Your library. Finished photoshoots are saved in your own browser on your device (browser storage). We cannot see them. If you clear your browser data they are deleted.
- Technical records. To control cost and stop abuse we keep counts of AI requests (which model, whether it worked, what it cost) and a one-way scrambled form of your connection address (IP address) for rate limits. These records do not contain your photos.
- Your beta passcode. It is stored in your browser so you only enter it once.
- Messages to us. If you email support@softboxly.com we keep the message so we can answer you.
We do not use advertising or analytics cookies or trackers.
2. AI services
To make and check photos we use AI image and vision models through OpenRouter. We only use models that are offered with Zero Data Retention, which means the provider does not keep your images or use them to train its models. Your photos are sent to these services only to produce your result.
3. Optional: your Google Drive or Dropbox
You can link your own Google Drive or Dropbox so your library is saved there and opens on any device you sign in on.
- What we can reach. With Google Drive we ask only for the “drive.file” permission. Softboxly can see, create, change and delete only the files it creates in a folder named “Softboxly”. It cannot see any of your other files. With Dropbox we use an “App folder”, so Softboxly can only reach Apps/Softboxly.
- What we save there. Your photoshoots: original photos, finished shots (as JPEG files) and a small settings file.
- Sign-in tokens. Your Google or Dropbox access stays in your browser. We do not receive or store your tokens or your cloud password, and your files never pass through our servers when they are saved to or loaded from your cloud.
- How we use it. Only to save and open your library for you. We do not use it for advertising, sell it, or use it to train AI.
- Removing access. Use Unlink in My photos, or remove Softboxly at myaccount.google.com/permissions (Google) or dropbox.com/account/connected_apps (Dropbox). Your files stay in your cloud folder until you delete them.
Softboxly’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Who else is involved
- Cloudflare hosts the site and our database of technical records.
- OpenRouter and its model providers process photos as described above.
- Google Fonts and cdnjs deliver the page’s fonts and a file-zipping library, so your browser contacts them when the page loads.
- Google or Dropbox, only if you link them.
- Resend may send email from us once accounts exist.
We do not sell personal information and do not share it for advertising.
5. How long we keep things
We do not keep your photos. Technical records are kept as long as needed to run the service, control costs and prevent abuse. Support emails are kept as long as needed to help you. Your device library and your cloud folder are yours: you decide how long they stay.
6. Your choices and rights
You can delete any photoshoot in My photos, unlink your cloud at any time, and clear your browser data to remove the device library. Depending on where you live (for example California), you may have the right to know what we hold about you, ask us to correct or delete it, and not be discriminated against for doing so. Email support@softboxly.com and we will respond within the time the law requires. Because we do not keep your photos, there is usually very little to delete.
7. Security
All traffic uses HTTPS. API keys for AI services stay on our server and never reach your browser. No method is perfectly secure, so please also keep your own copies of important photos.
8. Children
Softboxly is for businesses and adults. It is not directed to children under 13 and we do not knowingly collect information from them.
9. Changes
If we change this policy we will update the date above and, for material changes, tell you in the app.
10. Contact
Questions: support@softboxly.com