top of page

Privacy Policy


In this Policy, a reference to the “Provider”, “we”, “our”, or “us” means Coursebox Pty Ltd ABN 64 652 541 798 or Open Tute Pty Ltd ABN 80 607 003 136 depending upon which entity is providing the Services.  References to “you”, “User”, “licensee”, “licence holder” and “your” are to users of services provided by the Provider.

Please refer to common terms in the User Agreement.


This Privacy Policy explains the collection, use, and disclosure of “Personal Data” by us. As used in this policy, “Personal Data” means information that would allow a party to identify you such as, for example, your name, address or location, telephone number or email address.

Please take a moment to read the following to learn more about our information practices, including what type of Personal Data is gathered, how the Personal Data is used and for what purposes, to whom we disclose Personal Data, and how we safeguard your Personal Data.

This Privacy Policy also explains our commitment to you with respect to our use and disclosure of non-personal browsing and site usage data that we collect as the provider of the Services.


Unless otherwise noted on a particular site or service, this Privacy Policy applies to your use of all Services that we operate, including Portals, Channels, News Feeds, Profiles, Learning, Instant Messages, together with other services and platforms operated by us and any related services, tools or applications.

Except for trials, demonstration portals and our portals, we do not operate or manage licensed Private Portals, though as part of the licensing agreement we will provide upgrades, backups and maintain security certificates, as required. Where a licence holder does not use the SSL, they are required to maintain an SSL security certificate for custom domain names.

Where a licence holder opts to use this general privacy policy document, supplemental Privacy Policy terms (“Supplemental Privacy Policy Terms”) may apply to a particular Service. Any such Supplemental Privacy Policy Terms must be made clearly available by the licence holder to the end user of the portal.

Our privacy practices may vary among the countries in which we operate to reflect local practices and legal requirements (“Applicable Data Protection Laws”) but in general we comply with the GDPR (EU’s General Data Protection Regulation).

According to Applicable Data Protection Laws, you may be entitled to know the identity of your “Data Controller” i.e., the legal entity which determines why and how your personal data is processed. In most cases, this will be the Provider.  In the event a related entity of the Provider is responsible for processing your Personal Data as a Data Controller we will make you aware of this when you purchase the relevant product or service from us.

Our most important asset is our relationship with our user community. We are committed to maintaining the confidentiality, integrity, and security of the Personal Data of our users. 

By accessing or using any of the Services, you are accepting and agreeing to the practices described in this Privacy Policy.

Our Principles

The Provider is committed to handling responsibly the information and data we collect about you through our Services, whether Personal Data or non-personal browsing and site usage data. We have designed our Privacy Policy consistent with the following principles (the “Principles”):

  • Only the minimum amount of information reasonably necessary to provide you with Services should be collected and maintained, and only for so long as reasonably needed or required;

  • Information you provide through our Services, or that we gather as a result of your use of our Services, should not be used for marketing or advertising purposes (unless permission has been granted to the Super Administrator of the portal), nor should it be provided voluntarily (without your permission) to anyone else unless required; and

  • If we are required to provide anyone with your Personal Data (whether by subpoena or otherwise), then provided we have collected and retained an email address for you, we will use reasonable means to notify you promptly of that event, unless prohibited by law or we are otherwise advised not to notify you on the advice of lawyers.

Personal Data we Collects

We may collect Personal Data through our Services, including without limitation:

  • when you provide us with your Personal Data such as by sending an email to us or signing up to receive updates from us;

  • when you subscribe to one of our News feeds, Channels, Group chat, Surveys, Learning, Instant Messages, special notifications, email, app, and web notifications or related services;

  • when you create a user Profile;

  • when you provide Personal Data in connection with your participation in News feeds, Group chat, Channels, Surveys, Learning, Instant Chats, Messages, special group notifications lists, email, app, push and web dropdown notifications or related services;

  • Cookies used to track logins, sessions, and collect anonymous traffic;

  • Payments for managing your finances, including payments and withdrawals, including other use of PayPal, Stripe or other payment services as required or applicable;

  • Registration or connection via your logins and APIs including but not limited to LinkedIn, Facebook and Google;

  • IP addresses, URLs visited, and related information recorded for all site visitors for the purpose of site traffic analytics and captured as part of normal operation in our server logs.

What the we do with Personal Data

We use the collected data for various purposes:

  • To provide and maintain our Service.

  • To notify you about changes to our Service

  • To allow you to participate in interactive features of our Services when you choose to do so.

  • To provide customer support

  • To gather analysis or valuable information so that we can improve our Service.

  • To monitor the usage of our Service

  • To detect, prevent and address technical issues.

  • To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.

Retention of Data

We will retain your Personal Data generally for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Disclosures of Personal Data

In general, it is not our practice to disclose Personal Data to third parties. We may share your Personal Data in two instances:

First, we may share Personal Data with Private Portal Administrators, our contractors and service providers in order to maintain, enhance, or add to the functionality of the Services.

Second, we may disclose your Personal Data to third parties in a good faith belief that such disclosure is reasonably necessary to (a) take action regarding suspected illegal activities; (b) enforce or apply our User Agreement, Privacy Policy and Private Portal Agreement; (c) comply with legal process, such as a search warrant, subpoena, statute, or court order; or (d) protect our rights, reputation, and property, or that of our users, affiliates, or the public.

Transfer of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organisation or a country unless there are adequate controls in place including the security of your data and other personal information.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Reorganisation or Spin-Offs or similar business transaction

The Provider may transfer some or all of your personal and/or non-personal browsing information to anyone as a result of a reorganisation, spin-off, or similar transaction. Upon such transfer, the acquirer’s privacy policy will apply. In such an event, we will use reasonable efforts to notify you and to ensure that at the time of the transaction the acquirer’s privacy policy complies with the Principles.

If we are involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Security of Personal Data Collected via the Services

The Provider has implemented reasonable measures to protect against unauthorised access to and unlawful interception or processing of Personal Data that we store and control. However, no website can fully eliminate security risks. Third parties may circumvent our security measures to unlawfully intercept or access transmissions or private communications.

Some Services have security risks in addition to those described above. Among other things, may be vulnerable to DNS attacks, and may increase the risk of phishing.

Legal Basis for Processing Personal Data Under General Data Protection Regulation (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it.

We may process your Personal Data because:

  • We need to perform a contract with you.

  • You have given us permission to do so.

  • The processing is in our legitimate interests, and it’s not overridden by your rights.

  • For payment processing purposes

  • To comply with the law

Your Data Protection Rights Under General Data Protection Regulation (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

  • The right to access, update or to delete the information we have on you.

  • The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.

  • The right to object. You have the right to object to our processing of your Personal Data.

  • The right of restriction. You have the right to request that we restrict the processing of your personal information.

  • The right to data portability. You have the right to be provided with a copy of your Personal Data in a structured, machine-readable and commonly used format.

  • The right to withdraw consent. You also have the right to withdraw your consent at any time where we relied on your consent to process your personal information.

Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).


We may use third-party service providers to monitor and analyse the use of our Services.

Google Analytics

  • Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network.

  • You can opt-out of having made your activity on the Services available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.

  • For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page:


We may use OpenAI from time to time. For more information on the privacy practices of OpenAI,  please visit the OpenAI web page:


For Apps we may use Firebase Analytics from time to time. For more information on the privacy practices of Firebase,  please visit the Firebase Privacy web page:


The Services are not directed at children under the age of majority (i.e., In Australia the age of majority is 18). We will never knowingly request Personal Data from anyone under the age of majority without requiring parental consent. Our User Agreement specifically prohibit anyone using our Services from submitting any personally identifiable information about persons under the age of majority. Any person who provides their Personal Data to us through the Services represents that they have reached the age of majority (i.e., If the person is in Australia, they have reached 18 years of age or older.)

If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our platform.

Links to Third-Party Sites

The Services may include links to other websites. You should consult the respective privacy policies of these third-party sites. This Privacy Policy does not apply to, and we cannot control the activities of, such other websites.

Special Note to International Users

In general, the Services are hosted in Australia. Thus, please note that your personal data may be located on servers in Australia. However, some Private Portals licensees have requested that its Services be hosted in particular countries. By providing your personal data you consent to the use of your personal data for the uses identified above in accordance with the Privacy Policy.

Changes and Updates to this Privacy Policy

We may occasionally update this Privacy Policy. We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting the Personal Data we collect. Your continued use of the Services constitutes your agreement to this Privacy Policy and any updates.


Cookie Policy

Like many websites, we use cookies, alphanumeric identifiers in the form of text files that are stored on your computer, to understand how you use our products, to make it easier to use, to optimise your user experience, to improve the quality of our advertising (if applicable), and to protect you and us.

Some cookies, while useful, are not essential, and by using our website you agree to the use of all cookies unless you specifically set your browser to reject them, but in some cases that may impact your ability to use the website.

This Cookie Policy describes the types of cookies we use, how we use these to improve your product and advertising experience, and your choices related to the use of these cookies. Please take a moment to read the following to learn more about our cookie practices, including what type of information is gathered, how the information is used and for what purposes, and with whom we share the information.

Types of Cookies We Use

We use session and persistent cookies to optimise the service during your visit to our site and to recognise you when you return to our site. For example, we use them to store your login ID (but never your password) to make it easier for you to login whenever you come back to us. We also use them to remember the last application page you visited and advertisements (if applicable) you have already seen. These cookies help us optimise your experience to your usage, tune the experience to your preferences, and customise your experience by providing the most relevant content possible.

Site Operations Cookies

We use these cookies to understand and improve your user experience. For example, we may use these cookies and the information we receive to understand how you are using various parts of our service, improve our site, and to understand how you use other websites, products, services and advertisements. We may also share information about this analysis with our partners with the goal of improving the combined experience and for our users and tailoring your experience to what might be of interest to you.

You may manage how your browser handles cookies and related technologies by adjusting its privacy and security settings. Different browsers handle these settings differently, so please refer to your browser’s specific instructions to learn more about how to change cookie-related privacy and security settings. You should be aware that by disabling cookies in your browser you may impact some of the functionality available in the Service.

Feedback & Questions

If you have questions about this Privacy Policy, please visit .

How to contact us

If you have any questions about our privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at: 

Call us: +61 1300 239 208

bottom of page