Effective Date: December 22, 2025
Last Updated: December 22, 2025

Orange Box Inc. (“Orange Box,” “Company,” “we,” “us,” or “our”) operates under the trade name Budy (doing business as “Budy”). This Privacy Policy explains how we collect, use, disclose, and safeguard information in connection with our websites, products, tools, integrations, and services offered under the Budy brand (collectively, the “Services”).

This Privacy Policy applies to information collected through websites operated by Orange Box Inc., including https://www.budy.bot, https://www.budybot.ai, and any other domains or subdomains owned or controlled by Orange Box Inc. that link to this Privacy Policy (collectively, the “Site”), as well as through the Services.

Access to the Services is provided only in connection with an implementation, pilot, or other engagement with Orange Box Inc. The Services are not offered through public self-service sign-up, free tiers, or open subscription plans.

By accessing or using the Site or Services, you acknowledge that you have read and understood this Privacy Policy and agree to the practices described herein.

1. Definitions

• “Personal Information” means information that identifies or can reasonably be linked to an identifiable individual.

• “Customer Data” means data, content, or information provided to or made available through the Services by or on behalf of customers, including data accessed through authorized integrations.

• “Engagement” means an implementation, pilot, proof of concept, or other project under which access to the Services is provided.

• “Integrations” means third-party products or services that customers authorize to connect with the Services.

2. Information We Collect

A. Information You Provide Directly

We may collect Personal Information that you voluntarily provide, including:

• Name

• Business email address

• Company name and role

• Communications with us (including emails, meetings, support requests, and feedback)

B. Customer Data from Engagements and Integrations

In connection with an Engagement, customers may provide or authorize access to Customer Data through uploads, configuration, or Integrations with third-party systems (such as CRM, marketing, analytics, or sales tools). Customer Data may include:

• Lead, contact, account, and opportunity metadata

• Pipeline and deal information

• Campaign, attribution, and engagement data

• Workflow and operational metadata

Customer Data is processed solely to support the applicable Engagement and provide the Services.

C. Usage and Technical Information

When the Site or Services are accessed, we may automatically collect certain technical information, including:

• IP address

• Browser type and device information

• Operating system

• Log files, timestamps, and usage events

• Interaction data related to feature usage

This information is collected using cookies and similar technologies.

D. Cookies and Similar Technologies

We use cookies and similar technologies to:

• Enable basic Site functionality

• Maintain session integrity

• Improve performance and security

• Understand usage patterns at an aggregated level

You may control cookies through your browser settings. Disabling cookies may affect certain Site features.

3. How We Use Information

We use Personal Information and Customer Data to:

• Provide, operate, and support the Services

• Deliver and manage implementations, pilots, and other Engagements

• Generate insights, summaries, recommendations, and other Outputs

• Communicate with customers and users

• Improve reliability, performance, and security

• Comply with legal and regulatory obligations

4. AI Processing and Data Use

A. Use of Customer Data

Customer Data is used to generate Outputs and support internal business decision-making during an Engagement. Outputs are generated in response to customer-provided inputs and configurations.

B. Model Training

Customer Data is not used to train shared or generalized artificial intelligence models unless explicitly agreed to in writing.

We may use aggregated and anonymized data that does not identify customers or individuals to improve system performance, reliability, and quality.

C. Human Judgment

Outputs are intended to assist, not replace, human judgment. Customers are responsible for reviewing and validating Outputs before relying on them.

5. How We Share Information

We do not sell Personal Information.

We may share information in the following circumstances:

A. Service Providers

We may share information with trusted third-party service providers that perform services on our behalf (such as cloud infrastructure, security, or analytics). These providers are contractually required to protect information and use it only as instructed by Orange Box Inc.

B. Legal and Compliance Requirements

We may disclose information if we believe in good faith that such disclosure is necessary to:

• Comply with applicable laws or legal processes

• Enforce our agreements or policies

• Protect the rights, safety, or property of Orange Box Inc., our customers, or others

C. Business Transactions

If Orange Box Inc. is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

6. Data Retention

We retain Personal Information and Customer Data only for as long as reasonably necessary to:

• Support the applicable Engagement

• Provide and operate the Services

• Comply with legal obligations

• Resolve disputes and enforce agreements

Upon conclusion of an Engagement, data retention and deletion will follow the terms of any applicable written agreement. If no such agreement exists, data will be retained and deleted in accordance with our standard retention practices.

7. Data Security

We implement administrative, technical, and organizational safeguards designed to protect information, including:

• Encryption in transit and at rest

• Access controls and authentication mechanisms

• Secure infrastructure and monitoring

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access Personal Information we hold about you

• Request correction of inaccurate or incomplete information

• Request deletion of Personal Information, subject to legal or contractual obligations

Requests may be submitted by contacting [email protected].

9. Children’s Privacy

The Site and Services are not intended for individuals under the age of 13. We do not knowingly collect Personal Information from children.

10. Third-Party Services

The Services may connect to or link to third-party services. This Privacy Policy does not apply to third-party practices, and we encourage you to review their privacy policies separately.

11. International Data Transfers

Information may be processed and stored in the United States or other jurisdictions where Orange Box Inc. or its service providers operate. These jurisdictions may have data protection laws that differ from those in your location.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Site, the Services, or by email. Continued use of the Site or Services after changes take effect constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Orange Box Inc. (d/b/a Budy)
651 N Broad St, Ste 201
Middletown, DE 19709
Email: [email protected]