Brainbox (Privacy)

Last updated on 09 Oct 2026

At Wavebox, we understand the importance of security and privacy when integrating powerful tools like Brainbox into your daily workflow. This knowledge base article highlights the key security features implemented to protect your data and maintain your peace of mind.

🤖

How Brainbox fits together — Brainbox is Wavebox’s AI and it works in two ways. Chats with your tabs: the side panel works with your open tabs from every Space — @-mention any tab, trigger / Skills, and pick your engine (or add your own keys, or use the free on-device model from Brainbox Local AI). Each chat stays attached to the tab that was in focus when you opened it, and no conversation is ever out of reach — tap the ☰ menu > History to reopen any chat, any time, and carry on right where you left off. Paid plans include 1 million free tokens every month. And one special chat — Chat with Settings: the only chat that can actually change Wavebox. It sees your whole setup, remembers across sessions, and doesn’t use your tokens — ask it to change colours, add or remove apps, find a setting, or give you a 7-day Wavebox training course.

Information Sent to the OpenAI API

When you interact with Brainbox, the following information is sent to the OpenAI API:

Domain name: Your current app or tab domain (e.g., calendar.google.com) without the full URL. This allows Brainbox to provide contextual answers based on the site you are working on.
Time and timezone: The current time and timezone on your machine, enabling Brainbox to answer time-specific questions.
User-input text: The text you type directly into Brainbox.

For added functionality, you can ask Brainbox to grab either the full page (by clicking "include page") or specific text selections (by clicking "include selection"). If you explicitly choose either of these options, the page or selection will be sent along with your query to OpenAI. Otherwise, no information about URLs, tabs, or page content is sent.

OpenAI's Data Retention Policy

Since March 1, 2023, OpenAI does not use any data submitted through their API to train or improve their models unless you opt-in (which is not an option in Wavebox). More information about OpenAI's data usage policies can be found here: https://openai.com/policies/api-data-usage-policies

Server-side Token Management

On the server, Wavebox keeps track of the number of tokens used with Brainbox. Tokens are similar to a "word count" that gets incremented as you use the platform. We manage tokens for billing purposes, as each Wavebox subscription includes 1M tokens per month.

Should you wish to opt-out of this allocation, you can register a direct account with OpenAI, generate an API key, and paste it into the API Keys tab of the Brainbox Controls (click the sliders icon in the top right of the Brainbox panel), or in Settings > My Wavebox > Brainbox.

The security and privacy of your data are of prime importance to us. We've taken several measures to ensure that Brainbox operates securely while also providing valuable assistance in your daily tasks. By understanding the information transmitted, OpenAI's data retention policy, and token management, you can trust Brainbox as a reliable, helpful tool in your Wavebox.