Introduction
This website is owned and operated by GlassBox Verification Services, LLC dba GlassBox Verified (“GlassBox,” "we," "us," or "our"). We respect and protect the privacy of visitors to our website, our registered users, and the third-party clients whose data is processed through our platform.
This Privacy Policy describes our information handling practices when you access our services, which include our content located on glassboxverified.com, our dashboards, APIs, and related Data Infrastructure and Analytics services (collectively, the “Services”).
GBX is a Data Infrastructure and Analytics platform that serves as the definitive system of record for professional referral networks. Our Privacy Policy applies to everyone who utilizes our Sites, including Senders (paying professionals who route data), Receivers (free network partners who receive routed data), and the clients whose information is included in these workflows.
By using our Services, you consent to the data practices described in this policy. If you do not agree with the data practices described in this policy, you should not use the Services.
1. Types of Information We Collect
GlassBox collects information to verify user accounts, automate data routing, facilitate digital handshake agreements, and generate network analytics. "Personal Information" is information that identifies, relates to, or could reasonably be linked with a particular individual.
1.1 Categories of User Information (Senders & Receivers)
We collect the following data directly from the professionals using our platform:
Identity & Contact Data: Full name, business address, email address, phone number, and professional titles.
Business Data: Employer Identification Number (EIN), company name, industry type, and network connections.
Transaction Data: Details about payments to GlassBox (e.g., Sender subscription fees).
Network & Analytics Data: Response times, client feedback scores, and lifetime referral metrics generated across your Smart Partner Directory.
1.2 Categories of Routed Client Information
Because GlassBox acts as a secure data pipeline, Senders input or forward third-party client information into the platform to initiate a referral. This may include:
Client Contact & Deal Data: Names, emails, and deal summaries extracted via AI from forwarded communications.
Sensitive Client Files: Financial records, PDFs, and proprietary business documents uploaded to our secure data rooms for the Receiver to evaluate.
1.3 Device & Digital Information
We automatically collect information when you interact with our Sites, including:
Online Identifiers: IP address, browser type, device ID, and geolocation.
Usage Data: Click-stream data, pages viewed, and interaction with our digital signature flows.
2. How Information is Collected
Directly from You: When you create an account, build your Smart Partner Directory, or accept a Verified Term Agreement.
Via Automated Intake (Forwarded Communications): When a Sender CCs a dedicated GlassBox email address or forwards an email/text message to the platform, we collect the contents of that communication to generate Deal Summaries.
From Third Parties: Identity authentication services or integrated data partners.
3. How Your Information is Used
We use the collected information to:
Provide the Services: Route data safely between Senders and Receivers, host secure data rooms, and definitively reconcile referral agreements.
AI Data Parsing: Utilize third-party AI models to read forwarded email chains, extract key deal data, and instantly generate structured Deal Summaries.
Automated Communications: Deploy intelligent GBX agents to send warm introduction emails and SMS nudges to Receivers on behalf of the Sender to track deal progress.
Generate Analytics: Provide Senders with actionable intelligence on their professional network (e.g., partner response rates and closure metrics).
Process Payments: Collect subscription fees from Senders.
Comply with Law & Security: Detect fraudulent activity and maintain the security of our data infrastructure.
4. Sharing Your Information
We do not sell your personal information or your clients' information to marketing lists. We share data strictly to facilitate your requested data routing and infrastructure needs:
4.1 Receiving Partners
We share Routed Client Information with the specific Receivers (partners) selected by the Sender. Once data is routed to a Receiver, their use of that information is governed by their own independent privacy policies and data controller protocols.
4.2 Service Providers & AI Integrations
We share data with enterprise-grade vendors who help us operate the platform:
Cloud Hosting: (e.g., GCP, AWS)
ID Verification: (e.g., Persona, Socure)
Financial Parsing: (e.g., Ocrolus, Plaid)
CRM & Communication: (e.g., Hubspot, Twilio)
Authentication: (e.g., Supabase)
Development Tools: (e.g., GitHub, Vercel, Cursor, Replit, LangChain)
4.3 Legal Requirements
We may disclose information if required by subpoena, court order, or regulatory mandate, or to defend GlassBox against legal claims.
5. Security & Data Storage
GlassBox employs industry-standard security measures—including encryption in transit (TLS 1.2+) and at rest (AES-256)—to protect your data. We host highly sensitive client files and PDFs utilizing established infrastructure providers.
While we maintain strict access controls and siloed data rooms, no digital transmission or storage method is 100% secure. You acknowledge that you provide and route data through the platform at your own risk. Senders and Receivers maintain ultimate responsibility for the data they choose to upload or forward.
6. Your Rights & Choices
6.1 Access & Correction
You may log in to your account to update your profile and Smart Partner Directory.
6.2 Opt-Out of Communications
You may unsubscribe from marketing emails via the link in the footer. Receivers receiving automated SMS nudges from GBX tracking agents may opt out of text messages by replying "STOP" to any message. Note: You cannot opt out of critical transactional emails related to your subscription or active verified agreements.
6.3 Data Deletion & Retention
GlassBox will retain deal records and associated documents in accordance with the Sender's active subscription tier. You may request deletion of your account by contacting privacy@glassboxverified.com. Upon account termination, GlassBox reserves the right to securely delete stored files after a standard 30-day grace period, unless otherwise mandated by law or necessary to resolve active disputes.
7. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to:
Right to Know: Request categories of personal information we have collected.
Right to Delete: Request deletion of personal information (subject to operational and legal retention exemptions).
Right to Opt-Out: Opt-out of the "sale" or "sharing" of personal information for cross-context behavioral advertising.
Non-Discrimination: We will not discriminate against you for exercising these rights.
To exercise these rights, email privacy@glassboxverified.com.
8. Children's Privacy
Our Services are strictly B2B and commercial in nature. We do not knowingly collect information from individuals under 18.
9. Changes to This Policy
We may update this Privacy Policy to reflect changes in our business, technology, or legal requirements. Material changes will be notified via email or a notice on our Site. Your continued use of the Services constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy, please contact:
GlassBox Verification Services, LLC
410 N Scottsdale Rd Suite 1000, Tempe, AZ 85288
Email: legal@glassboxverified.com
Phone: (623) 377-4529