Privacy Statement

Last updated 2026-02-04

Cross-links: Terms & Conditions, Cookie Preferences, Refund & Cancellation.

1. Third parties

This document is provided in a formal register. It describes operational practices for the CertHarbor One learning environment operated for audiences in the Republic of Korea and international visitors accessing the same materials. It is not tailored legal advice.

We rely on subprocessors for hosting, email delivery, analytics (if enabled after consent), and support tooling. Contracts require data processing terms consistent with our instructions. A current list is available on request to academy@boxvault.one. If a subprocessor changes in a material way, we will update this Statement and, where required, seek renewed consent.

2. Data collected

We collect account identifiers (name, email), organization affiliation when provided, billing references handled by our processors, technical logs (IP address, device type, coarse location), and learning interaction metadata such as lesson completion timestamps. Support conversations you initiate are retained to resolve issues and improve documentation. We avoid collecting government identifiers unless a specific enterprise agreement requires them.

3. Scope

This Statement covers data processed through boxvault.one and related communications from CertHarbor One. It does not cover third-party sites linked for reference. Public forums, if enabled, may display content you submit under the name you choose; do not post secrets or personal data of others.

4. Retention

Account data is kept while the relationship is active and for a reasonable period afterward to meet legal, tax, and dispute-resolution needs, typically not longer than twenty-four months after closure unless a longer period is required by law. Logs may roll sooner. You may request deletion where compatible with those obligations.

5. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing. Residents in Korea may contact us to exercise rights under applicable personal information protection laws. We verify requests to prevent fraud and respond within statutory timelines.

6. Use of data

We use data to deliver lessons, personalize progress views, secure accounts, analyze aggregate usage to improve courses, and communicate service updates. Marketing messages, if any, are sent only with consent where required. Automated decision-making that produces legal effects is not used for learners.

7. Contact

Questions about privacy can be sent to academy@boxvault.one or by post to 12 Teheran-ro 26-gil, Gangnam-gu, Seoul, Republic of Korea. Please include enough detail for us to verify ownership of the account in question without asking you to transmit passwords.