Privacy Policy

tabox.ai · Last updated 22 October 2026 (version 2026-10-22)

This policy explains what personal information tabox.ai collects, why, and what you can do about it. tabox.ai is operated by Milesbrook Manor LLC, which operates TABOX ("we").

What we collect

• Your email address, which identifies your account and receives your sign-in codes.
• If you sign in with Google: your name, email address and profile picture, as Google shares them. We do not receive your Google password or any other Google data.
• Account settings an administrator or you set, such as your role, display name and saved preferences.
• Technical data needed for sign-in, such as session cookies, IP address and browser type, handled by our authentication provider to keep your session secure.

If you request an invite

The invite form asks for the answers below. Every question is required except the optional comment, so we can review each request; gender, income and investable account size also offer "Prefer not to say".

• Contact: your email address and first name.
• About you: country of residence, age band, gender, occupation, income band and investable account size band.
• About how you invest: years investing, how you invest today, the largest fall you would sit through, your main broker, the markets you want, whether you want weekly or monthly rebalancing, which level you want (Free or Signals), and how you heard of us.
• What you will use tabox.ai for: one or more of a short list of choices, and an optional comment in your own words.
• Consent record: the time you agreed to this policy and the version you agreed to.
• Technical data: your browser type, and a one-way hash of your IP address made with a secret salt. We never store the IP address itself. The hash is used only to limit repeated requests.

We use these answers to decide who to invite and when, since invitations open in batches, and to learn which markets and sources matter to the people who ask. If we approve a request, we email an invitation to the address you gave. We do not use the answers for advertising and do not share them with anyone except the providers below.

When a request arrives we send ourselves a short notification that contains only the country and the markets chosen. It carries no name, email, income or other answer.

Submitting the form again with the same email updates your earlier answers; it does not create a second request.

If you ask for Signals inside the app

A signed-in member can press "Request Signals access". We then record the time of the request and an optional note of up to 500 characters if you write one, against the answers you already gave. The request is shown to us in the same review list, and the short notification we send ourselves carries only your country and markets. One open request is kept per account. It is closed when we grant or decline it, and is deleted with your other answers.

Signals is sold per market. You choose which markets you ask for. If you ask for Signals, we use the answers in your profile to help set the price we offer you. A person reviews every offer. The price suggestion is made from your answer bands only (country, markets, age band, occupation, account size, income, years investing, what you use tabox.ai for and your current level), never your name, email or any note you wrote. We keep each suggestion and the price we finally offer, with your request, and delete them with your other answers.

An offer is a private checkout link on Whop for each market, valid for 14 days. When it ends we close the links and mark the request expired. Whop tells us your plan and the state of each market's membership; we use that to turn the market on or off in your account.

If you buy Insights

Insights is bought on Whop, which takes your payment and keeps your card details; we never see them. Whop tells us your email address, your plan and the state of your membership (active or ended). We use the email to create your account; you then sign in with a code we email you, or with Google. At your first sign-in we ask the same questions as the invite form, once, and keep the answers with the same limits as above.

If you use the Ask box in the help panel

The question you type is sent, with the name of the screen and a summary of figures on it (totals such as a median, never a stock name or a holding), to OpenRouter, which passes it to the company that runs the language model (Anthropic) to write the answer. It is sent only when you press Ask. We keep a log of each call: when, your account id, your level, the screen, the size of the call and its cost. We do not keep your question or the answer. The log is deleted after 400 days.

Why we use it

• To sign you in and decide which parts of tabox.ai your account can access.
• To remember your settings.
• To keep the service secure and working.

We do not sell your information, use it for advertising, or share it with anyone except the service providers below.

Service providers

These companies process data on our behalf, only to run tabox.ai:

• Clerk: sign-in and account management.
• Fly.io: hosts our API, the database of account settings, the database of invite requests and the log of help-panel calls.
• OpenRouter: passes help questions to a language model.
• Vercel: hosts the website.
• Cloudflare: domain name service, and Turnstile, which checks that an invite request comes from a person and not a program. Turnstile sees your browser and IP address when you open the form.
• ntfy: delivers our own notification of a new request (country and markets only).
• OpenRouter, and the AI model provider behind it: receives only the answer bands listed above when we ask for a price suggestion, never a name or an email.
• Google: only if you choose to sign in with Google.

Cookies

We use only the cookies needed to keep you signed in. We use no advertising or tracking cookies.

How long we keep it

Invite requests: a request we reject is deleted 12 months after the rejection. A request that is still pending is deleted 24 months after it arrived. A request from someone who became a member is kept with their account, and removed when the account is. We keep nightly backup copies of the invite database for 30 days, so a deleted request leaves the backups within 30 days.

Accounts: we keep your account information while your account exists. When an account is deleted, its information is removed from our systems and our providers' systems within their normal deletion periods.

Your choices

You can ask us to delete your invite request at any time; we remove it from the database on request, and from the backups within 30 days. You can ask us to show or correct your answers the same way.

You can ask us to show, correct or delete your information, or to close your account, by emailing privacy@tabox.ai. If you signed in with Google, you can also remove tabox.ai's access at any time in your Google Account under Security → Third-party connections.

Changes

If this policy changes, we will update the date above.