Who to contact
Parabox AI provides medical education resources. For questions about information held by Parabox, contact abhishekbenur@paraboxai.com. The owner must confirm the legal business identity and formal contact details before this draft is published.
Information used by the website
Contact enquiries include your name, email, category, message and optional organisation. Course-interest records include your email, selected course and a separate optional marketing choice. Review forms collect the details you choose to provide and any follow-up permission. We do not ask for patient records.
Accounts and product access
The Prompt Library uses Google sign-in through Firebase Authentication and checks your purchase email against a protected access record. Library access checks and prompt-view or copy counts support access administration and product operation. Saved prompt identifiers and recently opened prompts are stored in your browser for the account you use. The internal admin portal uses separate approved email and password accounts.
Forms, hosting and email
Firebase Hosting serves the website. Cloud Functions validate form requests and Firestore stores accepted enquiries and course interest. Firebase App Check helps protect public submissions. Contact messages enter a durable queue and, once configured, Resend delivers a notification to the Parabox team using a verified sender. Your email becomes the Reply-To address. Provider acceptance of a message does not guarantee inbox delivery.
Payments and external tools
Checkout and ebook fulfilment continue through SuperProfile. Parabox does not collect card details in these forms. SuperProfile and its payment partners have their own terms and privacy information. Opening ChatGPT, Claude, Instagram, LinkedIn or another external service subjects your use to that service’s policies. Personalised library guidance uses DeepSeek only when enabled and connected. The prompt or task sent for guidance must not contain identifiable patient information.
Optional website measurement
If enabled, and only after your permission, public-page analytics record page paths, campaign tags, referrer origin, device category, an approximate city and random visitor/session identifiers. They do not record prompt content or your account email. Protected library, administrative and authentication pages are excluded. Global Privacy Control and Do Not Track are respected. Change your choice using Privacy choices in the footer.
Retention and control
The implementation proposes expiry after 180 days for enquiries and one year for course-interest records. The owner must approve these periods and enable database expiry before production. Separate operational records, purchased access and reviews require an owner-approved retention schedule. Email inbox and provider retention must also be confirmed. Contact us to request access, correction, deletion or withdrawal of course interest. Some records may need to be retained for legitimate business or legal requirements.
Security and publication review
Form records are not publicly readable. Access is restricted through server-side checks, database rules and owner-managed permissions. Do not send secrets, payment-card details or identifiable patient information. The owner must confirm the legal identity, rights process, processors, international processing and retention details for the actual operating business before publication. This draft is not a certification of legal compliance.