How your conversations with Boxy are handled
This page covers how Boxy handles your data. For information about how Boxy works and what it can do, see About Boxy.
To monitor the quality and accuracy of Boxy’s responses, and to identify and correct errors, Runbox logs both sides of each conversation — your messages and Boxy’s replies. This allows Runbox to review interactions where Boxy may have given incorrect or incomplete information and to improve Boxy accordingly.
Runbox logs these conversations on the basis of legitimate interests: maintaining the accuracy and reliability of a support tool is a reasonable purpose, and the privacy impact is low. Conversations with Boxy concern Runbox product questions rather than sensitive personal data, and logs are accessible only to a small number of authorised Runbox staff.
Before being written to the log, your messages are automatically sanitised: email address local parts (the part before the @) are replaced with [redacted], values following password-related keywords are redacted, and long numeric strings that resemble payment card numbers are redacted. You should still avoid sharing passwords, payment details, or sensitive personal information in the chat — there is no need to do so, and doing so offers no benefit.
Conversation logs are stored on Runbox’s own servers in Norway and are retained for 10 days, consistent with Runbox’s log retention policy for other services. They are accessible only to authorised Runbox support staff. They are not shared with any third party beyond the AI providers listed below, who process your messages transiently as described.
In addition to being available for staff to review individually, logged conversations are also reviewed automatically once a day: a summary of the topics discussed is produced, and any conversation where Boxy may not have given a satisfactory answer is flagged for staff attention. This automated review is carried out by Mistral AI — the same provider already listed below, used here for an additional purpose — using the sanitised log data described above. It does not involve collecting any information beyond what is already logged, and exists solely to help Runbox identify gaps in Boxy’s knowledge base and improve future responses.
Cloudflare provides DNS lookup services for Runbox’s domains. This involves only publicly available domain information and does not raise any privacy concern.
Boxy’s replies are generated by one of two AI providers, Anthropic or Mistral AI, depending on which is currently in use — Runbox may change this from time to time. Whichever provider generates the reply, every message is also screened by Mistral AI for harmful content and used to retrieve relevant sections of Runbox’s knowledge base. Both providers are GDPR-compliant and neither uses your messages to train their AI models.
| Provider | Location | GDPR transfer basis | Trains on data |
|---|---|---|---|
| Anthropic | San Francisco, USA | EU-approved Standard Contractual Clauses | No |
| Mistral AI | Paris, France | EU-based company — no transfer required | No |
All AI processing runs through Runbox’s own server in Norway, which calls each provider’s API directly.
When you use the send to support feature, your conversation is transmitted to Runbox’s server in Norway, where it is emailed to the support team. Your email address, which you provide when sending, is used only to allow the team to respond to your enquiry and is not used for any other purpose.
As a Runbox customer, your data rights under GDPR are set out in Runbox’s Privacy Policy at runbox.com/about/privacy-policy/. These rights include access to, rectification of, and erasure of your personal data.
Country detection uses IP geolocation data provided by IPLocate.io, processed locally on Runbox’s servers. No IP addresses are sent to IPLocate.io.
For more detail on how each provider handles data, see Anthropic’s Privacy Policy and Mistral’s Privacy Policy. For questions specifically about how Boxy processes your data, contact Runbox’s Data Protection Officer at dataprotectionofficer@runbox.com.
← Back to Boxy