Trust
Privacy.
What this site, BOOX Mirror and checkout collect.
The short version
The website, Mac app and checkout handle different data.
- No analytics or advertising cookies. Checkout uses a short-lived cookie to tie your payment to this browser.
- Display preferences stay in your own browser. Text size, motion, contrast and focus visibility are stored on your machine and are never sent to us.
- BOOX Mirror sends nothing to GENbyAI. No account, no telemetry, and no service of ours anywhere in the connection path.
- Purchases create order data. Stripe Managed Payments handles payment.
- We run no marketing list. If you email us we reply, and that is the whole of it.
This policy covers this website, BOOX Mirror, and purchases made through this site. Our open-source projects live on other services, whose own policies apply there rather than this one.
The website
What this site collects
We use no analytics, advertising tags, session recording or fingerprinting. You do not need an account.
Fonts are served from this domain. Page headers disable camera, microphone, geolocation and interest-based ad cohorts.
Display preferences
Text size, motion, contrast and focus choices stay in your browser undergenbyai:prefs. They are not sent to us.
Use Reset on the home page or clear site data to remove these choices. If storage is unavailable, defaults apply.
Server logs
Our host may log IP address, time, requested URL and browser user agent for delivery, security and abuse prevention.
We do not profile you with these logs or join them to orders. Our lawful basis is legitimate interests (Article 6(1)(f)).
Product
BOOX Mirror
BOOX Mirror turns a BOOX tablet into a second display for an Apple-silicon Mac, over USB or your own Wi-Fi network. Our servers do not handle screen content.
What leaves your machine
BOOX Mirror — what it sends, stores and asks for
- What leaves your Mac
- Screen frames and, if enabled, input events travel over USB or your local Wi-Fi network. Nothing goes to GENbyAI.
- What is stored
- Connection settings stay on your Mac. We collect no screen content, usage data or telemetry.
- Account required
- No account or sign-in.
- AI or model calls
- No AI features or model calls.
- Cloud processing
- None. No GENbyAI service is in the connection path.
Permissions, and why each one is asked for
Permissions BOOX Mirror requests
- Screen Recording
- Required by macOS for any app that captures display output. Without it there is nothing to send to the tablet.
- Accessibility
- Only needed for Control Mac from BOOX — it is what lets tablet input drive the Mac. Skip it and the display stays view-only.
- Local network
- Only for Wi-Fi connections, to reach the tablet on your own LAN. USB connections never request it.
- USB device access
- For the debugging tunnel used during setup and for USB connections.
Purchases
What a purchase records
Payment is handled by Stripe Managed Payments, our merchant of record. They take the payment and handle applicable tax. Card details are never entered on this site and never reach us.
Being merchant of record means Stripe Managed Payments is the seller on the transaction and the data controller for the payment data: the card details, the billing address and the tax record are theirs, under their own privacy policy rather than this one.
What reaches us
The order record: a name, an email address, the country used to work out VAT, an order reference, and which licence was bought. We use it to confirm the licence and answer support questions about it. We do not profile it, we do not use it for marketing, and we do not sell or share it.
Our lawful basis for holding it is the contract you entered into when you bought the licence (Article 6(1)(b)). Keeping the sale record for tax is a legal obligation (Article 6(1)(c)).
At the time of writing we run no customer database of our own. Those records sit in the Stripe Managed Payments dashboard, which we sign in to when we need them. If that changes — if we begin keeping order records ourselves — this page changes with it.
No account is needed before you buy, and none is created for you afterwards.
Downloading the software
After payment, this browser can download the DMG for one hour. The server checks the paid Stripe Checkout Session and a short-lived browser cookie. No licence key or account is required.
Refunds are 14 days, no questions asked; the wording is on the Terms page. A refund is processed through Stripe Managed Payments against the order record you already have; it creates no new record of you.
If you write to us
There is one address, [email protected], and it reaches a person. We read what you send, reply to it, and keep the thread in our mailbox while the matter is live.
We run no marketing list. There is no newsletter to unsubscribe from, and buying something does not add you to one. The only email a purchase produces is the receipt sent by Stripe Managed Payments as part of the order.
Answering correspondence is the legitimate interest that covers this (Article 6(1)(f)) — or the contract, where you are writing about something you bought. Either way, an email to us is not a subscription.
Your rights
What the GDPR lets you ask for
If you are in the EU or the EEA, the GDPR gives you rights over the personal data we hold about you. They apply to the short list described above — which means that much of the time the honest answer to a request will be that we hold nothing at all.
Your rights, and what each one means here
- Access
- Ask what personal data we hold about you, and get a copy of it.
- Rectification
- Ask us to correct something that is wrong — a misspelled name on an order, for example.
- Erasure
- Ask us to delete what we hold, except where tax law requires the sale record to be kept.
- Restriction
- Ask us to stop using something while it is disputed or being checked.
- Portability
- Ask for the data you gave us in a machine-readable form, or ask us to pass it to someone else.
- Objection
- Object to processing we carry out on the basis of legitimate interests, such as server logs.
- Complaint
- Complain to your national data protection supervisory authority. You do not have to raise it with us first.
How to use them
Email [email protected] and say what you want. We have no accounts, so we look you up by the address the order was bought with or the order reference on your receipt. If a request cannot be matched to a record, we will tell you that rather than guess at one.
We answer within one month, which is the period the GDPR allows, and we do not charge for it. We rely on consent for nothing on this site, so there is no consent for you to withdraw.
Retention
How long any of it is kept
There is no number of years written into this page, and that is deliberate. The period that binds us is the one in the tax law that applies to the sale, so printing a shorter figure here would be a promise we could not keep. What we can state is the rule for each kind of record.
- Order and licence records. Kept for as long as the licence is live, so that we can honour it, and for as long as the law requires the sale to be kept for tax. After that they are of no use to us.
- Support email. Kept while the matter is open, and for a reasonable period afterwards in case you come back to the same problem. Then it is deleted.
- Display preferences. They stay in your browser until you reset them or clear this site’s data. We cannot delete them for you, because we cannot reach them.
- Server logs. Kept at the hosting layer under that provider’s own defaults. We do not extend them, export them or archive them anywhere.
Changes
When this policy changes
When the policy changes, this page changes: what you are reading is always the current text.
If a change is material — a new kind of data collected, a new processor in the chain, a new purpose for something we already hold — we will say what changed and date the change at the top of this page, rather than editing quietly and hoping nobody rereads it.
We run no mailing list, so we cannot email you when that happens. That is the trade for collecting so little: there is no list to notify from, and this page is the reliable place to check.