Privacy Policy

Last updated: May 11, 2026

This Privacy Policy explains how RAXX BEATS STUDIOS LLC (“we”, “us”) collects, uses, shares, and protects information when you use Move Your Mailbox (the “Service”). By using the Service, you agree to this Policy and to our Terms of Service and EULA.

1. Information We Collect

  • Account data: name, email, password hash, organization, role.
  • Billing data: handled by our PCI-compliant payment processor (Stripe). We store only the last 4 digits, brand, and expiration of the card.
  • Usage data: pages viewed, features used, performance metrics, error reports.
  • Device data: IP address, browser, OS, device identifiers, approximate location derived from IP.
  • Content: data you submit or upload while using the Service.
  • Cookies and similar technologies: for authentication, security, preferences, and analytics.
  • License and integrity signals: license-key validity, build version, anti-tamper checksums (for desktop apps).

2. How We Use Information

  • Operate, secure, and improve the Service.
  • Authenticate you and protect against fraud and abuse.
  • Provide customer support and respond to inquiries.
  • Process payments and manage subscriptions.
  • Send transactional emails and, with your consent, marketing communications.
  • Comply with legal obligations and enforce our agreements.

We do not sell your personal information. We do not use Your Content to train, fine-tune, evaluate, or benchmark any third-party machine-learning or generative AI model.

3. Legal Bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data under one or more of: (a) performance of a contract; (b) compliance with a legal obligation; (c) our legitimate interests in operating and securing the Service; or (d) your consent, which you may withdraw at any time.

4. Sharing

We share information with:

  • Service providers bound by confidentiality and contractual data-protection terms (hosting, payments, email, analytics, error monitoring).
  • Legal and safety: when required by law, to protect our rights, or to prevent fraud or imminent harm.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. International Transfers

We are based in the United States and may process information in the U.S. and other countries that may not provide the same level of protection as your home jurisdiction. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

6. Retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion at any time per Section 7.

7. Your Rights

Depending on where you live, you may have rights to:

  • access, correct, port, or delete your personal information;
  • opt out of certain processing, including marketing;
  • withdraw consent;
  • complain to a supervisory authority.

Submit a request to systems@raxxware.com. We will verify your identity before acting on it. We will not discriminate against you for exercising your rights.

8. California Privacy Rights (CCPA/CPRA)

California residents may request access to, deletion of, and correction of their personal information and may opt out of “sales” or “sharing” of personal information for cross-context behavioral advertising. We do not sell or share your personal information for those purposes. To exercise these rights, contact systems@raxxware.com.

9. Children's Privacy

The Service is not directed to children under 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will delete it.

10. Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including TLS in transit, encryption at rest where applicable, access controls, and audit logging. No system is perfectly secure; we cannot guarantee absolute security.

11. Third-Party Services

The Service may link to or integrate with third-party services. Their privacy practices are governed by their own policies. We are not responsible for the practices of third parties.

12. Google User Data & Limited Use

When you connect a Google account, we request only the narrowest scopes needed to move your data: gmail.readonly (read messages at the source), gmail.insert and gmail.labels (write migrated mail into the destination and recreate your folder structure), plus calendar, contacts, and tasks for the corresponding item types, and basic profile/email to identify the connected mailbox. We deliberately do not request gmail.modify — your source mailbox is only ever read from, never changed.

Google user data is used solely to perform the migration you request. Messages and other items pass through our systems in transit only — we do not retain message content after an item has been written to the destination. We store only the metadata required to run and resume a migration (item identifiers, folder paths, status, and a dedup fingerprint). OAuth tokens are encrypted at rest with AES-256-GCM.

We do not sell Google user data, use it for advertising, use it to train generalized AI or machine-learning models, or allow humans to read it except with your explicit consent for support, where required by law, or as needed for security or abuse investigations.

Move Your Mailbox's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect a mailbox at any time in the app, or revoke access directly at myaccount.google.com/permissions. Revoking access immediately stops any further data retrieval.

13. Microsoft Account Data

Microsoft 365 and Outlook connections work the same way. We request only the delegated Microsoft Graph permissions needed for the item types you choose to migrate, use that data solely to perform your migration, and store encrypted tokens plus migration metadata — never message content after delivery.

14. Changes

We may update this Policy from time to time. The “Last updated” date reflects the latest revision. Material changes will be communicated by in-product notice or email.

15. Contact

RAXX BEATS STUDIOS LLC
Wellington, Florida, USA
systems@raxxware.com