Privacy Policy
Effective Date: March 2025
Company: Boxed 88 Pty Ltd
Boxed 88 Pty Ltd (“we”, “us”, or “our”) operates StoriBot (“the Service”). We are committed to protecting your privacy and handling personal information in a transparent and responsible manner.
This Privacy Policy explains how we collect, use, store, and disclose personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).
1. Who This Service Is For
StoriBot is intended for use by individuals, businesses, and teams.
The Service is not intended for children, and we do not knowingly collect personal information from individuals under the age of 16. If we become aware that a minor has created an account, we may suspend or terminate that account.
2. Information We Collect
Account Information
- Email address (required for all accounts)
- Name and profile picture (if signing in with Google)
Authentication Data
- Authentication tokens stored locally on your device
- Credentials managed via AWS Cognito
Usage & Technical Information
- Device and browser information
- Approximate location derived from IP address
- Product usage and interaction data
IP addresses are not intentionally stored as user records, but may appear transiently in infrastructure logs (such as AWS CloudWatch).
User-Generated Content
The Service allows users to upload, create, and store files, datasets, pipelines, code, and derived outputs. This content may include personal, confidential, or sensitive data at the user’s discretion.
3. Responsibility for Uploaded Data
Users fully control the data they upload or process within Compute Tracks.
You are responsible for:
- Ensuring you have the legal right to upload and process data
- Ensuring compliance with applicable privacy, data protection, and confidentiality laws
- Managing access to your instances and data
We do not proactively inspect, validate, or moderate uploaded content except as required for service operation, support, or security.
4. How We Use Information
- Provide, operate, and maintain the Service
- Authenticate users and secure accounts
- Improve functionality and performance
- Communicate updates or provide support
- Understand usage patterns through analytics
We do not sell personal data or use it for advertising purposes.
5. Data Storage & Security
All primary service data is hosted on Amazon Web Services (AWS) in the ap-southeast-2 (Sydney) region.
Some AWS services operate globally by design. We rely on AWS-managed security and backup systems and apply industry-standard practices to protect data in transit and at rest.
6. Third-Party Services
- Amazon Web Services (AWS)
- Google OAuth
- Google Analytics
- Mixpanel
- Stripe (payments)
- OpenAI
These providers act as service processors. We do not intentionally provide personal data for resale or advertising.
7. International Users
StoriBot is available globally. By using the Service, you acknowledge that your data is processed under Australian law and that full GDPR-specific rights are not currently supported.
8. Account Deletion & Data Retention
Self-service account deletion is not currently available. You may contact us for assistance, and we will make reasonable efforts to accommodate requests.
Some data may be retained in backups, logs, or where required for operational, legal, or security purposes.
9. Liability & Disclaimer
StoriBot is provided on an “as is” basis. We are not responsible for user-uploaded content, outputs generated by the Service, or compliance obligations arising from its use.
10. Disclosure Required by Law
We may disclose personal information if required to do so by law or valid legal process.
11. Your Rights
You may request access to or correction of personal information we hold. Requests can be made by contacting:
privacy@computetracks.com
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or within the Service.
13. Contact
Data Controller: Boxed 88 Pty Ltd
Email: privacy@computetracks.com