Privacy Policy

Blackbox Intelligence Group LLC (“Blackbox”, “we”, “our”) operates the Blackbox Cyber Learning Center (the “Service”). This policy explains what we collect, how we use it, and the rights you have over your data.

Information we collect

• Account data: name, email, school or organization name, role (teacher, administrator, student), and a hashed password if you sign in with a password.
• Authentication data: when you sign in with Microsoft or Google, we receive your name, email, and profile image from the identity provider. We do not see or store your password.
• Learning and progress data: class enrollment, lesson and module progress, quiz and certification responses, scores, attempts, eligibility, credentials, appeals, and related timestamps.
• Order data: billing contact, organization, purchase amount, and payment status. We do not store credit card numbers.

How we use information

• To deliver the Service, including authenticating you and unlocking purchased curriculum.
• To send transactional email (sign-in links, order confirmations, account notices).
• To improve curriculum quality and platform reliability.
• To provide lesson voice features and review certification integrity.
• To meet legal, accounting, and contractual obligations.

Student data

The Service is designed for use by educators in CTE classrooms. Where student accounts exist, we collect the information needed to deliver curriculum and document learning: name, email, role, class enrollment, lesson and module progress, quiz and certification activity, scores, attempts, credentials, and appeals. We do not sell student data, use it for advertising, or build third-party marketing profiles. Schools may request export or deletion of student data, subject to legal and credential-record retention requirements.

Lesson voice and xAI

When an authorized user invokes lesson voice, Blackbox sends the relevant lesson context and the user's question or narration request to xAI to generate text and audio. xAI acts as a subprocessor for this feature. Depending on configuration, the request uses a Blackbox service key, the requester's authorized xAI connection, or the owning instructor's authorized connection. We do not send unrelated student records to xAI.

BB-CCA integrity data

If BB-CCA is enabled and a candidate takes an official exam, the Service records limited integrity telemetry such as focus and visibility changes, fullscreen exits, copy or paste attempts, question views, navigation, answer changes, timing, event sequence, and a coarse hashed device-class value. BB-CCA v1 does not access or record webcam, microphone, screen images, screen video, clipboard contents, keystrokes, page titles, or browsing history. Raw telemetry is retained for 90 days and then deleted; review decisions, appeals, audit events, and credential records may be retained longer.

Deterministic risk signals and an xAI-generated summary help an authorized human reviewer. AI is advisory only: it does not change exam scores or make credential decisions. Human reviewers decide clearance, violations, retakes, suspensions, and revocations. Candidates may appeal an adverse integrity decision within 14 days.

Sharing and subprocessors

We share data only with service providers required to operate the platform, including hosting, authentication, email, payment processing, and xAI for invoked lesson voice and BB-CCA advisory integrity analysis. We do not sell personal information.

Security

Passwords are hashed with bcrypt. All traffic is TLS-encrypted. Database backups are encrypted at rest. Access to production systems is restricted to authorized Blackbox personnel.

Your rights

You may request access to, correction of, or deletion of your personal data by contacting privacy@blackboxintelgroup.com. School administrators may make these requests on behalf of students in their organization.

Contact

Blackbox Intelligence Group LLC
privacy@blackboxintelgroup.com