The ShareNow privacy framework applies.

The ShareNow privacy policy describes the governing treatment of account and service data.

Operating a Box requires account identifiers, workspace settings, lifecycle state, metering and billing records, and the infrastructure metadata needed to provision the machine. Commands, files, snapshots, secrets, and desktop or SSH activity are processed only to provide the actions you request. Workspace content remains private to the authorized account unless you deliberately publish or transmit it elsewhere.

Stopping a Box ends active compute while preserving its durable workspace; deleting it is the action that removes the Box resource. Operational and billing records may follow the retention described by the governing ShareNow policy or applicable law. Boxie uses access controls, encrypted transport, and isolated cloud workspaces, but you should still avoid placing credentials in prompts, logs, source control, or support messages.

Contact the privacy team from the email associated with your account when possible. Describe the account or Box involved without including credentials, secret values, or private workspace content. The team can route access, correction, deletion, and other privacy questions under the governing policy.