Last updated 31 October 2026
AskMyBox is operated by myEcommerce, Inc., a California corporation. This policy explains what we collect, why, and what we do not do. It describes how the service actually works rather than reserving every right we might one day want.
AskMyBox lets an organization upload documents and email archives and ask questions about them in plain language. Content is organized into projects — typically one per client, case or matter — and a search is confined to the single project you have selected. That boundary is enforced on every query, not merely presented in the interface.
Account information. Your email address, your name if your sign-in provider supplies one, an internal account identifier, and a recovery email address if you add one. If you use two-factor authentication we store only one-way hashes of your recovery codes — never the codes themselves.
Content you upload. Documents, email archives, attachments and media, together with everything we derive from them in order to make them searchable: extracted text, descriptions of images, transcripts of audio and video, summaries of large spreadsheets, and numerical representations (embeddings) used for search.
How you use the service. Your questions, the answers returned, your chats and folders, and which documents were cited.
Operational records. Timestamps, IP addresses and diagnostic logs, used to keep the service running and to investigate abuse.
If you sign in with Google we receive your email address, whether Google has verified it, and your name. We use these only to identify your account. We do not sell this information, use it for advertising, or share it with third parties, and our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We never receive your Google password.
Questions and documents are processed by AWS Bedrock to produce answers. Neither we nor Amazon use your content to train or improve any model. Your documents are used to answer your questions and for nothing else.
We do not sell personal information, and we do not share your content with anyone else.
In Amazon Web Services data centres in the United States (Oregon,
us-west-2).
Your data is encrypted in transit and at rest. Connections to the service are encrypted, as are connections between our servers and our databases, and stored data is encrypted on disk.
Access requires an authenticated account and two-factor authentication is available to every user. Access to a project is granted explicitly, is checked on every request, and is confined to the single project you have selected — one customer's documents cannot appear in another's results.
We keep your content until you delete it or close your account. Deleting a document removes the stored file, everything derived from it, and its database records, and it is removed from the search index shortly afterwards. Deleting an account removes its content; records that exist for security and audit purposes — that an action occurred, and when — are retained.
You may ask us for a copy of your information, ask us to correct it, or ask us to delete it, by writing to the address below. California residents have rights under the California Consumer Privacy Act, including the right to know what personal information we collect and to request its deletion. We do not sell personal information, so there is nothing to opt out of.
AskMyBox is a tool for organizations and is not intended for anyone under 18. We do not knowingly collect information from children.
If we change this policy we will update the date above, and we will tell account holders directly about any change that materially affects them.
myEcommerce, Inc., California, United States
[email protected]