Terms of Service

1. Acceptance

BoxOwl is operated by BoxOwl LLC (Colorado, US). By using BoxOwl, you engage BoxOwl LLC to operate a personal-data vault on your behalf and you agree to these Terms of Service. You remain the controller of the personal data you place in the vault; BoxOwl LLC acts as operator of the service. If you do not agree, please do not use the service.

2. Service Description

BoxOwl operates a personal vault and autofill service on the user's behalf. You decide what to store in the vault, which apps to connect, and which fields each connected app may read under per-field scoped consent. BoxOwl as operator stores, syncs, and projects the vault per your instructions and these Terms. Features and availability may change as the product evolves.

3. User Responsibilities

As the controller of the personal data you place in the vault, you are responsible for the accuracy of that data, for keeping your account credentials secure, and for the scope of any per-field consents you grant to connected apps. Do not use BoxOwl to store illegal content.

4. Data & Privacy

You are the controller of your personal data; BoxOwl LLC operates the vault as a service to you; apps you connect are processors of your data under the per-field scoped consent you grant. Your use of BoxOwl is also governed by our Privacy Policy, which details how BoxOwl as operator handles vault data on your behalf and how you exercise your rights as controller.

5. Limitation of Liability

BoxOwl is provided "as is." We are not liable for damages arising from your use of, or inability to use, the service beyond what is required by applicable law.

5a. Data Resharing Prohibition

If you are an app or organization connected to a user's vault, you act as a processor of that user's data under the per-field scoped consent the user granted. The user, as controller, remains the source of authority over that data. You may not republish, resell, redistribute, or share data accessed through BoxOwl connections with any third party without the user's separate, explicit consent. This includes sharing connection data via API, screen scraping, or any other means.

If you receive data through a BoxOwl connection — whether from an individual user or an organization — that data was shared with the expectation that you will use it only for the purpose you disclosed at the time of consent. Using it for any other purpose is a violation of these terms and of the user's controller rights over their own data.

6. Changes to Terms

We may update these terms from time to time. Continued use after changes means you accept the updated terms.

7. Contact

Questions about these terms? Reach us at support@boxowl.me.