Legal

Privacy

Last updated November 8, 2026

The short version: this website counts visits anonymously, unless you arrive through a personal link we sent you or send us a form. A script from Instantly, the service we send cold email with, may also tell us which company, and sometimes which person, visited. Your box is where your conversations live, and they stay there.

This website

ownbox.io sets no cookies of its own, except one when a partner's link brought you here (below). The visitor tracking for our cold email, below, may set its own. It is hosted by Vercel, which, like any web host, processes the technical details of each request — your IP address, your browser, and the page you asked for — in order to serve the page and keep the site running. The forms on the site are the contact form, the partner application, the sign-up on Start free and the demo sign-up, below.

Analytics

To learn which pages help people, we count visits with PostHog: the pages you view, the links and buttons you click, the site that sent you, and your general location and device type. Your browser sends these through ownbox.io's own address, which passes them straight to PostHog. It sets no cookies; it keeps an anonymous id in your browser’s storage so one visit is not counted as several, and clearing your browser storage removes it. It does not record your session or replay your visit. It also keeps the campaign tags on the link that brought you (the utm_ part of a web address) in your browser’s storage, never a cookie. If you answer a form’s optional question, how you heard about us, your choice is kept with your visit and sent to us with the form. If an AI app such as ChatGPT sent you here, a form you send also tells us which one. If your browser sends Do Not Track, nothing is collected at all.

We may ask an optional question in a small box at the corner of the page. Your answer is kept with the rest of your visit, and you can close it without answering.

One exception: a personal link. Links in emails we send carry a short reference to you (pid= in the address). If you arrive through one, your visits are linked to that reference, so we can see that our email led you here and what you read. Only a link like that, or a form you send us, does this; anyone arriving any other way stays anonymous. If you then follow a link from this site to brian-macdonald.com, our other site, the reference goes with you, so your visits to both count as one. Clearing your browser storage removes the reference.

And when you give us your email. If you send a form on this site, such as the contact form or a request for a guide, your visits in this browser are linked to the email you gave, so we can see what you read before you wrote to us. Clearing your browser storage removes the link.

A partner's link. If a partner sent you here (p= in the address), your browser remembers that partner until you close the tab, and a checkout you start passes their name to Stripe so the sale is credited to them. It is kept in your browser's storage for that visit only, never a cookie.

Visitor tracking for our cold email. Every page of ownbox.io, and the page at www.ownbox.app, loads a script from Instantly, the service we send cold email with, run for them by Leadsy. It sends them details of your visit, such as your IP address, your browser and the pages you view, which they may match with their own business data to tell us which company, and sometimes which person, visited. It may set its own cookies.

A link from our partner program. If you arrive through a link from someone in our partner program (aff= in the address), Partnero, the service that runs the program, records that the link was used and keeps a cookie in your browser for 60 days that names the partner. If you buy within those days, the checkout passes that name to Stripe so the partner is credited with the sale, unless another partner's p= link brought you on that same visit, which is then credited instead. It is the one cookie this site sets, and only a link like that sets it. Clearing your browser's cookies removes it.

PostHog keeps page views and clicks for seven years, including visits linked to a personal link or a form you sent, then deletes them.

When you write to us

The contact form takes your name, your email address and your message, and sends them to our inbox so we can reply. Nothing is stored on this website. Your name and email address also join the Ownbox email list, as the line under the button says (more on the list below). The message is delivered by Resend, our email provider, which handles it in order to deliver it.

The partner application works the same way: what you enter is emailed to us so we can review it, nothing is stored on this website, and we send you one email to say it arrived. Your name and email address join the Ownbox email list.

The sign-up on Start free works the same way: your work email, and your answers to the questions after it, are emailed to us so a person can walk you through building your first machine. Nothing is stored on this website, and your email address joins the Ownbox email list. We send you one email with the first step, and after that we write to you ourselves.

The Ownbox overview (“Get the Overview” in the header, and the form at the foot of the homepage) takes your email address and nothing else, and we send you the overview once. As each of these forms says, your address also joins the Ownbox email list, kept with Resend, for occasional updates as new Machines become available. We also email ourselves a note of each request, with the page it came from. Nothing is stored on this website.

The Ownbox email list is kept by our own server with Resend, with where you joined, the date, and the line you were shown. Every email from the list has a link to unsubscribe, and once you use it we send you nothing more and a later form doesn't add you again.

The demo sign-up is how you get into the demo Ownbox. The demo page sends your email address, the page and any campaign tags in the link that brought you to our own server, which emails you a link and a 6-digit code through Resend. The link works for 24 hours and the code for 10 minutes. Once you use either one, the page signs you in to the demo, you join the Ownbox email list in Resend, with the date and the line you agreed to under the button, and we email ourselves a note. If you never use them, you are not added to the list. Your browser keeps a random number, not your email, so you aren't asked again that day.

When you buy

Checkout happens on Stripe's own payment page. Your card details go to Stripe and never pass through this website. Stripe handles them under its privacy policy.

When you book a call

The booking page is run by Cal.com. What you enter there goes to Cal.com and to us, so that we can hold the call, together with the campaign tags of the link that brought you and, if you came through a personal link, its id, so we know which email led to the call. All of it is kept under Cal.com's privacy policy.

Your box

Your conversations are stored in your box's own database, on its own server. Nothing we run reads them. While we host your box, its backups stay with the same hosting provider and nowhere else, and once you move it to your own account we have no access at all.

• While we manage your box, we hold operator access to the machine so we can keep it running. You can revoke that access at any time, and the box keeps working.
• You can take the box home to your own account any time from 30 days after you buy; it starts with a short setup call.
• If you turn on the AI, it runs on your own API key and that provider bills you. We never hold your key.

Questions

Book a call and ask. See also the terms.