How Openbox handles platform information.

Openbox may collect account information such as name, email address, role, login activity, and account preferences.

When learners use the platform, Openbox may collect course enrollment records, lesson progress, assessment attempts, completion dates, certificate IDs, membership status, and transcript-related records.

For enterprise programs, Openbox may store organization names, learner mappings, assigned curricula, external learner IDs, and course completion delivery records needed to coordinate training activity.

We use information to create and secure accounts, provide course access, process memberships and individual course purchases, track learning progress, generate completion records, and support enterprise training workflows.

We may also use information to provide customer support, maintain platform reliability, improve course experiences, and communicate account or service-related updates.

Payments are processed by Stripe. Openbox does not store full payment card numbers in the application.

Openbox stores payment-related identifiers such as Stripe customer IDs, checkout session IDs, subscription IDs, and payment status so course access and membership status can be provisioned correctly.

Openbox may use secure video infrastructure, including Mux, to deliver course videos and protect access to paid lessons.

The platform may generate short-lived playback tokens and rate-limit playback requests to protect learners, course content, and platform resources.

When an enterprise customer uses Openbox, completion records may be exported or delivered to an approved external LMS endpoint configured by an administrator.

Those records may include learner identifiers, course identifiers, completion dates, completion status, scores where applicable, and certificate references.

Openbox may share limited information with service providers that help operate the platform, including authentication, database hosting, payment processing, video delivery, email, analytics, and infrastructure providers.

Openbox does not sell learner personal information. Enterprise completion data is shared only as needed to support the enterprise training workflow configured for that customer.

Openbox uses access controls, server-side authorization, signed video playback, and database policies to help protect account and course records.

We retain records for as long as needed to provide the service, support completion history, meet operational needs, or satisfy applicable legal and business requirements.

Learners may contact Openbox to request help with account access, correction of account information, or questions about course records.

Enterprise learners may also need to contact their organization for questions about assigned training, external LMS records, or organization-controlled training requirements.