Privacy

Shoebox keeps only what it needs to move photos from your team into your Buffer account.

If you connect Buffer

We store your Buffer account id, name, email and timezone, plus encrypted access tokens. We read your channels, posting schedule and posts to find empty slots and notice when a post goes out. We can't see your password.

If someone sends a photo

We store the photo, the note and the name they typed, and their confirmation that they have permission to share it. Photos are re-encoded on arrival, which removes embedded data such as GPS location. Photo links are public but hard to guess, because Buffer has to be able to fetch them when a post goes out.

AI processing

When AI features are turned on, photos, notes and voice notes are sent to the configured AI provider to draft captions and alt text, check photos and transcribe speech. A person reviews every draft before it reaches Buffer.

Deleting your data

In Settings, “Disconnect and delete everything” erases your tokens, shoeboxes, photos and notes straight away. Photos you already sent to Buffer stay in Buffer; to revoke access, also remove Shoebox from your Buffer settings.