Draft — read before launch

Privacy Policy

Last updated: [FILL IN DATE]

1. What we collect

Account details (name, email), course progress, and — for business accounts — the names and emails of students you enroll via bulk import. Payment details are handled entirely by Stripe; we never see or store card numbers.

2. Why we collect it

To provide your account, track course progress, issue certificates, process payments, and send service emails (password resets, access-expiry reminders, receipts).

3. Who we share it with

Stripe (payments), [FILL IN: email provider, e.g. Postmark/SES], and — for business-enrolled students — the business account that enrolled them can see that student's progress within their organization.

4. Data retention

[FILL IN: how long you keep account data after a user requests deletion or an account goes inactive.]

5. Your rights

[FILL IN: rights under applicable law — e.g. UK GDPR: access, correction, deletion, portability. Include a contact method for exercising these.]

6. Cookies

We use a session cookie required for you to stay logged in. [FILL IN: any analytics or marketing cookies you add later.]

7. Contact

Privacy questions: [FILL IN contact email].