BXP Inc.
Real Estate
19
out of 100. Number 500 of 512, counting from the worst.
Where BXP Inc. does well
- Arbitration 0 of 20. Nothing found.
- Renewals 0 of 20. Nothing found.
- Data sharing 3 of 20. Few problems found.
- Data retention 3 of 15. Few problems found.
- No forced arbitration, class-action waiver, or jury-trial waiver anywhere in the Terms — disputes go to real federal/state courts in Massachusetts, which is better than most consumer-facing companies.
- No data selling: the 2019 policy stated 'We do not sell Personal Information,' and the 2026 CCPA disclosure chart lists only service providers as recipients of personal information (no advertising partners).
- California privacy rights are honored with a dedicated email (privacypolicy@bxp.com) and toll-free number (1-866-347-9381), plus a right to deletion and nondiscrimination.
- No consumer subscriptions, auto-renewals, or cancellation traps exist at all — the site is an informational B2B/landlord presence.
- Security camera/keycard data is stated to be 'collected and used solely for safety, security, access control, operational integrity, and compliance with applicable law' — a purpose limitation.
BXP can rewrite its site rules whenever it wants and is not required to tell you.
The fine print
7 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
BXP can rewrite its site rules whenever it wants and is not required to tell you. If you keep using the site after a change, you're bound by terms you may never have seen.
BXP reserves the right to change these Terms and Conditions at any time without notice.
-
Privacy policy changes take effect the moment they're posted — merely visiting the site again counts as agreeing to the new rules, including any new data uses.
Any modifications to this Privacy Policy will be effective when posted (or as otherwise indicated at the time of posting). In all cases, your continued use of the Services after the posting of any modified Privacy Policy indicates your acceptance of the modified Privacy Policy.
Privacy Policy (previous version, effective December 29, 2019)
-
If using the site costs you money or destroys your data, BXP disclaims all responsibility and caps any remaining liability at the absolute legal minimum.
In no event shall BXP, its employees or agents, or anyone else who has been involved in the creation, production, or delivery of these pages be liable for any direct, incidental, or consequential damages such as, but not limited to, loss of anticipated profits, benefits, use, or data resulting from the use of these pages. ... IN SUCH STATES, THE LIABILITY OF BXP SHALL BE LIMITED TO THE GREATEST EXTENT PERMITTED BY LAW.
-
Simply walking through a BXP building or retail center with Wi-Fi on lets them log your phone's hardware address — no connection or consent screen required. The stated opt-out is turning off your phone's Wi-Fi.
When you enter one of our locations with a Wi-Fi enabled mobile device we may collect the MAC address, Internet Protocol address and OS device name of Wi-Fi enabled devices. This information is automatically collected if your device's Wi-Fi is enabled, even if you are not connected to a Wi-Fi network.
Privacy Policy (previous version, effective December 29, 2019)
-
Your phone is tracked as a customer-analytics beacon inside their retail property, and the data goes to a third-party vendor measuring how long you linger and how often you come back.
Our vendor, Presence Aware, uses the MAC addresses we collect at our Prudential Center retail location to provide us a number of performance metrics such as average linger time in store, number of visitors in store, conversion of passing trade to customers, number of return customers and average time between visits.
Privacy Policy (previous version, effective December 29, 2019)
-
If you set your browser to ask websites not to track you, BXP ignores it.
Do Not Track. Some Internet browsers may be configured to send "Do Not Track" signals to the online services that you visit. We currently do not respond to "Do Not Track" or similar signals.
Privacy Policy (previous version, effective December 29, 2019)
-
Data they deem 'anonymous' can be handed to any third party, including to market BXP itself — and 'anonymous' is defined by BXP, not by you.
We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Services and promote our business.
How these were found
BXP is a B2B office REIT (formerly Boston Properties); its website is an informational landlord/investor presence with no consumer accounts, purchases, or subscriptions — most sneakiness categories score near zero by nature, not by virtue. Documents relied on: Terms and Conditions at https://www.bxp.com/terms-of-service (undated; fetched Oct 1, 2026); Privacy Policy at https://www.bxp.com/privacy-policy, last updated August 4, 2026, effective August 18, 2026 (fetched Oct 1, 2026); previous Privacy Policy version (effective December 29, 2019) at https://www.bxp.com/wp-content/uploads/2025/09/Effective-as-of-December-29-2019.pdf; 2025 CCPA disclosure chart at https://www.bxp.com/wp-content/uploads/2026/08/BXP-Privacy-Policy-2025-Chart.pdf. Note: the current privacy-policy page rendered only partially (the 'How we share,' 'Your choices,' and 'Changes to this Privacy Policy' sections did not render), so those sections are quoted from the 2019 PDF, which remains the publicly linked previous version. No mirrors needed — all documents fetched directly from bxp.com. Limiting note: verifying California privacy requests may require government-issued identification and valid power of attorney for authorized agents.
These notes come from the original draft and are not independent verification.