Privacy Policy

1. Introduction

LittleBoxes.ai ("we", "us", or "our") operates the LittleBoxes.ai web application (the "Service"), which lets users design custom storage boxes and export them as STL files for 3D printing. This Privacy Policy explains what information we collect when you use the Service, how we use and protect that information, and what choices you have.

By using the Service you agree to the collection and use of information as described in this policy.

2. Information We Collect

Account information

When you create an account we collect your first name, email address, and a hashed copy of your password. We never store passwords in plaintext.

Box designs and parameters

The boxes you design — including dimensions, wall and bottom thickness, fillet, and other parameters, plus any titles or descriptions you give them — are stored in your account so you can revisit, edit, duplicate, and download them.

Printer settings

We store your printer bed size, filament price, and filament density so we can calculate material usage and warn you when a design exceeds your printer's build volume.

Usage data and logs

We collect technical information when you use the Service, including your IP address, browser type and version, pages visited, timestamps, and download counts for your boxes. This information helps us operate the Service, diagnose problems, and detect abuse.

3. How We Use Your Information

To provide the Service

We use your account, design, and settings data to authenticate you, render your saved boxes, generate STL files, and apply your printer-specific calculations.

To send account-related emails

We use Resend to deliver transactional emails such as email verification, password resets, and important account notices. We do not use your email address for marketing without your consent.

To improve the Service

Aggregated and de-identified usage data helps us understand which features are valuable, where users encounter friction, and how to prioritize improvements. We do not sell your personal data to third parties.

4. Data Storage and Security

Your data is stored in a managed database hosted by our infrastructure provider. We use industry-standard safeguards including encrypted connections (HTTPS), salted password hashing, CSRF protection, and per-user authorization checks so that one account cannot access another account's boxes or settings.

No system is perfectly secure. While we work to protect your information, we cannot guarantee absolute security. If we become aware of a breach that affects your data, we will notify you in accordance with applicable law.

5. Data Retention

We retain your account and design data for as long as your account is active. If you delete your account, we will delete your personal information and your boxes within a reasonable period, except where retention is required for legal, accounting, or fraud-prevention purposes. Server logs are typically retained for up to 90 days for diagnostic and security purposes.

6. Your Rights

You have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information directly through your account settings or by contacting us;
• Delete your account and the personal data associated with it;
• Export a copy of your box designs in STL form at any time.

To exercise any of these rights, contact us at info@littleboxes.ai. We may need to verify your identity before acting on a request.

7. Cookies and Session Data

We use cookies that are strictly necessary to operate the Service, including a session cookie to keep you logged in and a CSRF token cookie to protect form submissions. If you enable "Remember me" at login, we set a long-lived cookie so you stay signed in across visits. We do not currently use third-party advertising or analytics cookies.

8. Third Party Services

We share the minimum information necessary with the following service providers to operate LittleBoxes.ai:

• Resend — handles delivery of transactional emails. Resend processes the recipient address and email contents on our behalf and is bound by its own privacy policy.

We do not sell, rent, or trade your personal information to third parties for their own purposes.

9. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, children under 13 years of age. If you believe a child under 13 has provided us with personal information, please contact us at info@littleboxes.ai and we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and, where appropriate, provide additional notice (for example, via email or an in-product notice). Your continued use of the Service after the changes take effect constitutes your acceptance of the updated policy.

11. Contact Information

Questions or requests about this Privacy Policy can be sent to info@littleboxes.ai.