Privacy Policy

Breadbox (“Breadbox,” “we,” “our”) provides a customer relationship management platform built for managed service providers. This policy describes what information we collect, how we use it, and the rights you have over it. It applies to breadboxmsp.com, the Breadbox application, and related services.

Account information. When you sign up, we collect your name, work email, company name, and authentication credentials. If you pay for a subscription, our payment processor collects billing details — we don't store full card numbers on our servers.

Customer data. As you use Breadbox, you upload data about your accounts, contacts, deals, and playbooks. This is your data. We process it to provide the service to you and do not sell it, rent it, or use it to train third-party AI models.

Integration data. When you connect a PSA, email, or calendar integration, we receive the data those systems expose to us under the permissions you grant. You can disconnect integrations at any time from your workspace settings.

Usage and device data. We log standard request metadata — IP address, user agent, pages visited, actions taken — to secure the service and improve product quality.

Communications. If you contact us via the site, email, or support channels, we keep a record of that conversation so we can help you.

We use the information we collect to:

• Operate, maintain, and improve the Breadbox platform.
• Authenticate users, bill customers, and prevent abuse.
• Power product features you've asked for, such as health scores, playbooks, and integration sync.
• Respond to support requests, send service notices, and — with your consent — send occasional product updates.
• Meet legal, tax, and compliance obligations.

We share personal information only with the subprocessors and partners we need to run the service. These include cloud hosting, payment processing, email delivery, customer support, and analytics providers. Each is bound by contractual confidentiality and data-protection obligations. A current subprocessor list is available on request from privacy@breadboxmsp.com.

We may also disclose information when required by law, to protect the rights or safety of Breadbox or others, or in connection with a merger or acquisition — in which case we will provide notice before your data becomes subject to a different privacy policy.

We do not sell personal information.

We keep your customer data for as long as your workspace is active. If you cancel, we retain the data for a short grace period so you can re-activate or export it, after which we delete or anonymize it. Backups are purged on a rolling schedule. Logs and billing records may be kept longer where required for security or legal reasons.

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. Workspace admins can action most of these requests directly inside Breadbox. For anything you can't do yourself, contact us at privacy@breadboxmsp.com and we'll respond within the timeframe required by applicable law.

If Breadbox processes personal data on your behalf as a data processor (for example, your end-customer contact records), we will assist you in responding to data subject requests under the terms of our Data Processing Addendum.

We use a small set of cookies to keep you signed in, remember preferences, and measure aggregate product usage. We do not use third-party advertising cookies on our marketing site. You can control cookies through your browser settings; blocking essential cookies may prevent parts of the product from working.

Breadbox is operated from the United States. If you access the service from another country, your information will be transferred to and processed in the United States and any region where our subprocessors operate. Where required, we rely on Standard Contractual Clauses or equivalent safeguards to protect cross-border transfers.

Breadbox is a business product and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

We'll update this policy as Breadbox evolves. When we make material changes, we'll notify account admins by email or in-app notice before the changes take effect. The “Last updated” date above always reflects the current version.

Questions about this policy or how we handle your data? Email privacy@breadboxmsp.com.