Legal
Privacy Policy
Last updated: March 22, 2026
Healthcare Adjacency Notice: This website is a marketing and informational site for Lockbox AI. It does not process, store, or transmit protected health information (PHI) as defined by HIPAA. The contact form collects business inquiry information only. For information about how Lockbox AI handles data within its products, please contact us directly.
1. Information We Collect
We collect information you voluntarily provide when you submit our contact form.
Contact Form Fields
| Field | Required | How Used |
|---|---|---|
| Name | Yes | Included in the email sent to our team |
| Company | Yes | Included in the email |
| Phone | No | Included in the email if provided |
| Message | Yes | Included in the email |
Infrastructure Logs
Standard web infrastructure logs are generated automatically when you visit the site. These are retained for security and abuse monitoring purposes.
| Log Type | Location | Retention | Contains PII? |
|---|---|---|---|
| Lambda application logs | AWS CloudWatch | 90 days | No |
| API Gateway access logs | AWS CloudWatch | 90 days | Source IP only |
| CloudFront access logs | Amazon S3 | 90 days | Source IP, URL, user agent |
Application log design: Our contact form Lambda is deliberately designed to log only structural metadata — field presence, character counts, and processing outcomes — but never the actual content of name, company, phone, or message fields. This is an explicit privacy-by-design choice documented in our engineering practices.
2. How We Use Your Information
Form submissions follow a simple, transparent flow:
- → Form data is used solely to deliver assessment request emails to the Lockbox AI team
- → Data is not stored in a database — it exists only in the email delivered to our inbox
- → No user account is created from your submission
- → No automated marketing emails are sent in response
3. Data We Do Not Collect
- ✓ We do not use cookies for advertising or behavioral tracking
- ✓ We do not collect device identifiers, browser fingerprints, or precise location data
- ✓ We do not create user profiles or accounts from form submissions
- ✓ We do not sell, rent, or share your form submission data with third parties
- ✓ We do not use form submissions for AI model training
- ✓ Form message content is never logged — only structural metadata appears in infrastructure logs
4. Third-Party Services
This site uses the following third-party services. Each has its own privacy policy governing how they handle data.
| Service | Purpose | Data Sent | Privacy Policy |
|---|---|---|---|
| Amazon SES | Delivers contact form email to our team inbox | Form field values | aws.amazon.com/privacy |
| Amazon CloudFront | Content delivery network serving this site | Standard web request data (IP, URL, headers) | aws.amazon.com/privacy |
5. Cookies and Tracking
This site is designed to minimize cookie usage:
- We do not set first-party analytics or advertising cookies
- No persistent cookies are set by this site
6. Children's Privacy
This site is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us so we can delete it promptly.
7. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the site after changes constitutes acceptance of the updated policy.
8. Contact
For privacy questions or to exercise your data rights, contact:
Lockbox AI, Inc.
Email: contact@lockboxai.com