What SOPBox collects, why, who else handles it, how long it is kept, and the rights you have over it.