This policy explains what Sandbox collects, why, and what you can do about it.
What we collect
- Account details: your name and email address, the accounts you belong to and your role in each.
- Captured messages: the email and SMS your apps send to Sandbox, including their content, headers, attachments and phone numbers.
- Billing: your plan and subscription status. Paddle handles payment, so we never see or store your card details.
- Technical data: the IP addresses that connect to our servers and the basic logs we need to keep the service running and secure.
How we use it
To run Sandbox: sign you in, show your captured messages to you and your team, send sign-in links and invitations, and bill your account. We don’t sell your data or use it for advertising, and we don’t read your captured messages unless you ask us to help with a problem.
Who we share it with
- Paddle, our reseller and Merchant of Record, which processes payments and handles tax.
- Our email provider, which delivers sign-in links and invitations.
- Our hosting provider, which runs the servers your data is stored on.
Cookies
We use cookies only to keep you signed in and to protect forms. We don’t use tracking or advertising cookies.
How long we keep it
Captured messages stay until you delete them or clear the inbox. Email inboxes keep the most recent 500 messages. Account details stay while your account exists. Ask us to delete your account and we’ll remove its data, except what we must keep by law, such as billing records.
Your rights
You can ask for a copy of your data, have it corrected, or have it deleted. Email hello@tosandbox.com and we’ll reply within 30 days.
Changes
If we change this policy in a way that matters, we’ll email account owners first.