Privacy Policy

01 Scope and who is responsible

This Privacy Policy applies to the GLASSBOX website, courses, checkout and customer experience, newsletters, livestream-related interactions, communities, and support channels that link to it (collectively, the “Service”). AIIMOX LLC is responsible for personal information processed under this Policy.

This Policy does not govern independent third-party services, even when we link to or integrate with them. Their privacy notices explain their practices.

02 Information we collect

Information you provide

• Contact information: such as your name, email address, mailing address, and social handle.
• Purchase and account information: such as order, product, price, status, login, and course-access records.
• Payment-related information: such as billing address, card type, and transaction identifiers. Payment providers process full payment credentials for us.
• Course and community activity: such as lesson progress, questions, comments, uploads, survey answers, and content you choose to post.
• Communications: messages, refund requests, support correspondence, testimonials, and preferences.

Information collected automatically

• Device and log data: IP address, device and browser type, operating system, timestamps, requested pages, referrer, errors, and security events.
• Usage data: interactions with pages, links, videos, emails, and course features.
• Approximate location: inferred from an IP address, such as country or city-level location.
• Cookies and local storage: identifiers and preferences, including the light/dark theme setting on this website.

Information from others

We may receive information from providers that help with checkout, course hosting, video delivery, email, communities, analytics, fraud prevention, and customer support; from social platforms when you interact with our public accounts; and from referral or affiliate partners, where permitted by law.

03 How we use information

• provide the website, fulfill orders, create access, and deliver course content;
• authenticate users, remember preferences, and maintain course progress;
• process payments, taxes, refunds, disputes, and transaction records;
• respond to questions, support requests, and legal or privacy requests;
• send service notices and, where permitted, marketing or challenge updates;
• understand use, troubleshoot, improve content, and develop features;
• detect fraud, abuse, security incidents, and violations of our Terms;
• comply with law, enforce agreements, and establish or defend legal claims; and
• complete a merger, financing, acquisition, reorganization, or sale of business assets.

We may create aggregated or de-identified information that does not reasonably identify you and use it for lawful business purposes. We will not attempt to re-identify it except to test our de-identification methods or as permitted by law.

04 Legal bases for processing

Where laws such as the GDPR require a legal basis, we rely on one or more of the following:

• Contract: to provide a purchase or requested Service and administer your account.
• Legitimate interests: to operate, secure, support, understand, and improve GLASSBOX, and to market it in a proportionate way.
• Consent: for optional communications, cookies, or other processing where consent is required. You may withdraw consent prospectively.
• Legal obligation: to keep tax records, respond to lawful requests, and comply with applicable law.
• Legal claims and vital interests: where processing is necessary to protect a person or establish, exercise, or defend claims.

05 Cookies and similar technologies

The website may use cookies, pixels, software development kits, and browser storage. These tools can keep the Service working, remember settings, secure sessions, measure performance, and understand engagement. This website currently stores your light or dark theme choice in your browser’s local storage.

You can delete or block cookies and stored site data in your browser. Some controls may affect site functionality. If optional analytics or advertising technologies are introduced where consent is required, we will provide the relevant choice before activating them for that user.

06 How we disclose information

We may disclose personal information to:

• Service providers: vendors supporting hosting, content delivery, payments, email, customer support, analytics, security, accounting, and professional advice, subject to appropriate restrictions.
• Platforms you choose: when you direct us to connect with or publish to a third-party service.
• Authorities and legal recipients: when reasonably necessary to comply with law, legal process, or valid requests; protect rights, safety, or security; or prevent fraud and abuse.
• Transaction participants: actual or prospective buyers, investors, lenders, and advisers in a merger, financing, reorganization, bankruptcy, or sale of all or part of the business, subject to confidentiality protections where appropriate.
• Others with your direction or consent.

As of the effective date, we do not sell personal information for money and do not share personal information for cross-context behavioral advertising. If that changes, we will update this Policy and provide legally required opt-out controls before applying the change to covered information.

07 Payment processing

Payments are handled by third-party processors. They collect payment credentials directly and may use personal information to authorize transactions, prevent fraud, comply with financial rules, and provide their services. AIIMOX generally receives transaction details and limited payment metadata, not your complete card number or security code. Review the processor’s notice presented at checkout for details.

08 Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to provide access, maintain transaction and tax records, resolve disputes, enforce agreements, protect security, and meet legal obligations. Retention depends on the data, the relationship, legal requirements, and operational need.

Purchase and accounting records are typically retained for up to seven years. Account and course records may be kept while access remains active. Marketing data is kept until you opt out or it is no longer needed, after which we may retain limited suppression data so we honor the opt-out. We delete or de-identify information when the applicable period ends, unless law permits or requires longer retention.

09 Security

We use administrative, technical, and physical safeguards designed to protect personal information based on its nature and risk. No website, transmission, or storage system is completely secure, so we cannot guarantee absolute security. Use a unique password, protect your devices, and contact us promptly if you suspect unauthorized account activity.

10 International data transfers

AIIMOX is based in the United States, and personal information may be processed in the United States and other countries where providers operate. Those countries may have different data protection laws. Where required, we use recognized safeguards for transfers, such as contractual protections, and you may contact us for information about the applicable mechanism.

11 Your choices and privacy rights

Communications

You may unsubscribe from marketing emails using the link in the message or by emailing us. We may still send non-promotional messages about a purchase, account, security, or request.

Privacy requests

Depending on where you live and subject to legal exceptions, you may have rights to know or access, correct, delete, restrict, or receive a portable copy of personal information; object to or opt out of certain processing; withdraw consent; and appeal a denied request. You may also have the right not to receive discriminatory treatment for exercising a privacy right.

Submit a request to kevin@goglassbox.com. Describe your request and the email or account involved. We may verify your identity by matching information we already have or requesting additional information. An authorized agent may submit a request where allowed, but we may request proof of authority and direct identity confirmation. We will respond within the time required by applicable law.

12 U.S. state privacy notice

This section summarizes categories of personal information we may have collected and disclosed for business purposes during the preceding 12 months. We disclose these categories to the recipients described in Section 6 based on which services they provide. Not every category applies to every person.

Sources include you, your device and Service activity, payment and platform providers, social platforms, referral partners, and service providers. AIIMOX does not knowingly use or disclose sensitive personal information to infer characteristics about a person. We do not offer financial incentives for personal information. Rights and obligations in this section apply only where the relevant state law covers AIIMOX and the particular processing.

13 EEA, UK, and similar rights

If covered data protection law applies, you may have rights to be informed; access, correct, or erase data; restrict processing; receive portable data; object to processing based on legitimate interests or direct marketing; and withdraw consent. You may lodge a complaint with the data protection authority where you live, work, or believe a violation occurred. We encourage you to contact us first so we can try to resolve the issue.

We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects about you.

14 Children’s privacy

The Service is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 submitted personal information, contact us so we can investigate and delete it as appropriate. Users must also meet the eligibility rules in our Terms of Use.

15 Third-party links and public areas

Third-party websites and services have their own privacy practices. Information you post in a public or shared course area may be seen, copied, or used by others, so do not post personal or confidential information you do not want shared. AIIMOX is not responsible for how another user independently uses public information.

16 Changes to this Policy

We may update this Policy as the Service, vendors, or law changes. We will post the updated Policy with a new effective date and provide additional notice if a material change requires it. We will seek consent before using previously collected information in a materially different way where law requires consent.