Coursebox
Coursebox · Productivity · AU · www.coursebox.ai
services/coursebox.yamlVendor data-handling terms
The policy lists service improvement as a purpose and offers a data processing agreement, but does not state whether uploaded course content is used to train models.
“We retain your Personal Data for as long as is reasonably necessary to fulfill the purpose for which we collected that data.”
“Information we hold about you, including Personal Data, may be maintained on computers located outside of your state, province, country or other governmental jurisdiction. / We may, at our discretion, change the location where your data is stored, including to a different country.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| coursebox.ai | app | observed |
Assessment
Reasoning: A course-generation platform that ingests internal training material. The policy offers a DPA with SCCs, which is the right instrument, but reserves the right to move data between countries at will and does not address training on uploads. For an EU deployer the DPA is the document to rely on, not this page.
Flags: Training use of uploads not stated · Storage location changeable at vendor discretion · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Retention and transfer terms verified against the Coursebox privacy policy; training use not stated.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.