Privacy Policy

PropBox ("we", "us") is an online service for traders who work with proprietary trading firms. It collects challenge receipts, resets, payouts and trading-software subscriptions in one place, sends renewal reminders and produces a yearly report. PropBox is operated in Israel by Tal Shimon Yazamut (טל שמעון יזמות), a registered exempt dealer (Osek Patur). This policy explains what we collect, why, who we share it with and your rights. Privacy contact: hello@getpropbox.com.

1. Information we collect

• Account details: email address, optional name, and password (stored only as a salted hash).
• Emails you forward to us: each user gets a personal address (e.g. name123@in.getpropbox.com). We only receive messages that you choose to forward to it, typically receipts, invoices and payout confirmations, including attachments. We have no access to your mailbox, except as described in the next item about the Chrome extension.
• The PropBox Chrome extension (optional, annual plan): if you install the extension and click "Import", it searches the Gmail already open in your browser for messages from prop firms, payout platforms and trading-software vendors from the last two years, and sends only those messages to PropBox. The extension is read-only: it does not send, delete or change anything in your mailbox, and it runs only when you click the button. All other email stays in your browser. Use of information received from Gmail through the extension is limited to recognizing your receipts and showing them to you. It is not transferred to third parties, not used for advertising, and not read by humans unless you ask for support or the law requires it. This use complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
• Transaction data: details extracted from those emails or entered manually, such as firm, amount, currency, date, invoice number and transaction type.
• Files you upload: PDFs, images or email files.
• Notification details (optional): phone number and WhatsApp opt-in, and browser push subscription data.
• Payments: once online payments are enabled, they will be processed by a third-party payment provider. We do not store card numbers.
• Technical data: an essential login session cookie and basic server logs (IP address, time, browser type) for security and troubleshooting. We do not use advertising cookies or tracking tools.

2. How we use it

• To provide the service: recognize receipts and payouts, convert amounts to ILS using official Bank of Israel rates, show statistics and generate reports.
• To send you renewal reminders, alerts and operational account emails.
• For support, security, abuse prevention and legal compliance.

We do not sell personal data, do not use it for advertising, and do not send marketing email without your explicit consent.

3. Who we share it with

We share data only with service providers that help us run PropBox, and only as needed:

• Render: application and database hosting (EU servers, Frankfurt).
• Mailgun (Sinch): receiving the emails you forward and sending operational emails.
• Google Workspace: our support mailbox. Google Fonts: website fonts.
• Cloudflare: network delivery and protection.
• Meta (WhatsApp Business): only if you opt in to WhatsApp alerts.
• A payment processor: once online payments are enabled.

We disclose data to authorities only when required by law.

4. Retention and deletion

We keep your data while your account is active. You can delete your account at any time from the app settings or by contacting us, and your account and its data are then removed from our active systems. You can export all your data (Excel or ZIP) before deleting.

5. Your rights

Under the Israeli Protection of Privacy Law, 5741-1981, and, for users in the EU, the GDPR, you may request access to, correction, export or deletion of your data, or object to certain processing. Email hello@getpropbox.com and we will respond within 30 days.

6. Security

Connections are encrypted (HTTPS), passwords are hashed, each user has a unique inbound address, and inbound email webhooks are signature-verified. No system is 100% secure; if a breach affects your data we will notify you as required by law.

7. Children

PropBox is intended for users aged 18 and over. We do not knowingly collect data from minors.

8. Changes

If we update this policy, the date at the top will change. We will notify you of material changes by email or in the app.