Privacy Policy
Last updated: March 11, 2026
1. What We Collect
We collect only the data required to run the service: account identity from Google sign-in (email, display name, avatar, locale), generated course content, payment records required for billing and dispute handling, and security telemetry used to defend the platform.
2. Legal Basis
We process data under contract necessity (service operation and billing), legitimate interests (fraud prevention and platform security), and consent where required. Consent is versioned and can be withdrawn in the Privacy Center.
3. Your Rights
You can request access and portability of your data, withdraw consent, and delete your account through the Privacy Center. Account deletion triggers removal of linked user records from active production collections.
4. Data Retention
We apply automatic retention controls: idempotency keys are removed after 24 hours, general logs after 7 days, security logs after 30 days, archived courses after 365 days, privacy request evidence after 1095 days, and payment records after 2555 days.
5. Security Controls
Sensitive account fields are protected with application-level encryption. Authentication is handled through short-lived access tokens and rotating refresh tokens. Security logs are pseudonymized and monitored for abuse prevention.
6. Cookies and Sessions
We use essential security and session cookies needed to operate authentication and platform protection. We do not require marketing cookies to create and manage a course.
7. Processors and Transfers
We rely on infrastructure and payment processors to provide hosting, analytics, payment processing, and messaging services. Data processing agreements are maintained with key vendors where required by law.
8. Incident Response and Notification
We maintain a breach response procedure with triage, containment, evidence preservation, and legal notification steps. If an incident creates a legal duty to notify users or regulators, notices are sent within the applicable statutory timelines.
9. Contact
For privacy requests and legal notices, use the channels listed on this site and in your account area. We keep records of rights requests and responses for compliance evidence.