1. Introduction
Promoter in a Box (“POX”, “we”, “us”, or “our”) operates promoterinabox.com (the “Service”). This Privacy Policy explains how we collect, use, and protect information about you when you use our Service. By using POX, you agree to the practices described in this policy.
2. Information We Collect
We collect the following categories of information:
- Account information: your email address and a hashed version of your password when you register.
- Account type: whether you identify as a musician or video creator / streamer.
- OAuth tokens: encrypted access tokens and refresh tokens issued by third-party platforms you choose to connect (e.g. Spotify, YouTube, TikTok, Twitch, SoundCloud). See Section 4 for details.
- Usage data: standard server logs including IP address, browser type, pages visited, and timestamps, retained for up to 30 days for security and debugging purposes.
3. How We Use Your Information
We use the information we collect to:
- Authenticate you and maintain your session.
- Use connected third-party platform data to prepare targeted promotion guidance.
- Send service-related alerts and notifications within the promotion workspace.
- Improve and maintain the reliability of the Service.
- Comply with legal obligations.
4. Third-Party OAuth Integrations
POX integrates with the following third-party platforms via their official OAuth 2.0 APIs:
| Category | Platforms |
|---|---|
| Audio | Spotify, SoundCloud, Audius |
| Video | YouTube, TikTok, Twitch |
| Merch | Shopify, Fourthwall, Spring |
When you connect a platform account, POX requests read-only OAuth scopes strictly limited to retrieving analytics, stream counts, subscriber data, and storefront metrics for display within your dashboard. We do not request permission to post, publish, delete, or modify any content on your behalf on any of these platforms.
OAuth access tokens and refresh tokens are stored encrypted in our database and are used solely to make API calls on your behalf when you are actively using the Service. You can disconnect any platform at any time from the Settings page, which immediately deletes the associated token from our database.
Our use of data obtained through Google APIs (including YouTube Data API v3 and YouTube Analytics API) complies with the Google API Services User Data Policy, including the Limited Use requirements. Our use of TikTok APIs complies with the TikTok Developer Terms of Service.
5. We Do Not Sell Your Data
Promoter in a Box does not sell, rent, trade, or otherwise transfer your personal information or any data retrieved from connected third-party platforms to any third parties for advertising, marketing, or any commercial purpose. Your data is used exclusively to provide the Service to you.
6. Data Retention
We retain your account information for as long as your account is active. OAuth tokens are deleted immediately upon disconnecting a platform. You may request deletion of your account and all associated data by contacting us at the address below.
7. Security
We use industry-standard measures to protect your information, including encrypted HTTPS transport, bcrypt password hashing, and server-side encrypted token storage. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Children's Privacy
The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the “Last updated” date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@promoterinabox.com.