The questions every cigar operator asks before they sign up. Answered the way the founder would answer them on the phone — not the way a marketing team would write them up.
No. That is the founding promise of the company. If something is wrong with your install, we call you. If you appear to violate a law, we call you. There is no silent shutoff. The reason Boxpress exists is because Shopify and Square both deplatformed Fathom & Fury without a conversation. We are not going to do to you what was done to us.
There is nothing to outgrow. Every feature is included from day one — unlimited registers, unlimited B2B accounts, unlimited reps, all 50 states of OTP filing prep. You will not hit an artificial cap that forces an upgrade conversation. If you genuinely need something we do not yet build, tell us and we will tell you honestly whether it is on the roadmap.
Full data export, no lock-in. CSV export from the admin UI on demand for products, customers, orders, wholesale accounts, sales rep visit logs. Want a full Postgres dump? Email us, we will send it. We will even help you migrate to a competitor and tell you what we would do differently.
Yes. Pattern-2 strict multi-tenancy. Every customer install gets a dedicated Postgres database — physically separate, not row-level filtered. If your competitor is also a Boxpress customer, your tables and theirs never share a server. We cannot accidentally leak your data because it is not in the same place.
No. Flat $497/month, full stop. FluidPay's processing fees are paid directly to FluidPay — that is between you and the processor, and it is the same rate whether or not Boxpress is in the picture. We do not take a transaction fee, a percentage, or a cut of any kind.
No. The whole platform runs through the admin UI. POS, inventory, products, orders, wholesale, age verification, license tracking, PACT Act, OTP filing, branding, content, automation. If you can run a Shopify store, you can run a Boxpress install.
FluidPay primarily — that is the cigar-friendly rail. Authorize.net is available as an alternate if your situation calls for it. Cards are tokenized so your servers never store PAN data, which dramatically reduces your PCI scope.
USPS, UPS, FedEx, EasyPost, ShipStation, and Pirate Ship. The integrations cover label generation, tracking, and PACT Act carrier rules out of the box.
Avalara and Sovos integrations for general sales tax, plus native PACT Act and 50-state OTP modules built in. Every state's OTP rate is tracked. Filing-ready reports generate monthly. Your bookkeeper will not have to chase fields across three systems.
Email plus a Slack channel with the founding team. Email Jake at [email protected] and you will get an answer the same day, often within the hour. White-glove onboarding for the first 14 days. After that, you have direct access to the people who built the platform — not a tier-1 ticket queue.
Yes. Fathom & Fury (fathomfury.com) is the flagship demo install — Jake's own cigar company, built on Boxpress, taking real orders from real customers. Book a demo and we will walk you through both the public storefront and the admin side.
No. FluidPay tokenizes cards at the moment of capture. We never see the PAN. Refunds, voids, partial refunds, and settlement reports all reference the FluidPay token. Your install is not in PCI scope for card storage.
In progress. SOC 2 Type 1 expected by Q3 2026, Type 2 by Q1 2027. In the meantime, we publish our security posture openly: AES-256-GCM encryption at rest, timing-safe HMAC signature verification on every webhook, per-tenant rotating magic-link secrets, dedicated Postgres per tenant, and a recent third-party adversarial audit that found 35 issues across 7 pillars — all criticals and highs were resolved within 24 hours.
Behind the scenes for translation (EN/ES storefront), content suggestions (PDF Studio sell sheets, product descriptions), and security auditing. Customer data is never used to train external models. If we ever change that, you would hear about it from us first, in plain English, with an opt-out before the change took effect.
Email Jake directly at [email protected]. Or pick a 30-minute slot and we will walk through the live admin together.
Book 30 minutes with the founderNo. We won't pitch you. We'll show you what we've built and let you decide.
Tell us your business type. We open the live admin and walk you through the exact features you'd use on day one. You ask whatever you want about compliance, payments, deplatforming, data ownership, pricing, integrations. If it's not the right fit, you say no and we don't follow up. 30 minutes. No deck. No upsell. The founder is on the call.