Privacy Notice

1. Information We Collect

Account information: When you create an account, we collect your email address and a hashed password. We do not store passwords in plain text.

Content you upload: PDFs, text, YouTube URLs, and website URLs you provide as source material for course generation. This content is processed by AI to generate your courses and is stored in your account.

Usage data: We collect information about how you use the Service, including course creation counts and feature usage, for billing and product improvement purposes.

2. How We Use Your Information

We use your information to: provide and maintain the Service; process payments through Paddle; generate AI course content from your source material; send transactional emails (welcome email, billing notifications); improve the Service based on usage patterns.

3. Third-Party Services

We use the following third-party services that may process your data:

• Supabase: Database and authentication hosting
• Anthropic (Claude): AI content generation
• Paddle: Payment processing
• Vercel: Application hosting
• fal.ai: AI cover image generation
• Firecrawl: Website content extraction
• Supadata: YouTube transcript extraction
• Resend: Transactional email delivery
• Google Analytics: Anonymous usage analytics
• Hotjar: Anonymous session analytics

4. Data Storage and Security

Your data is stored securely using Supabase with row-level security policies ensuring you can only access your own data. All API communications are encrypted via HTTPS. Server-side API keys are never exposed to the client.

5. Data Retention

Your account data and course content are retained as long as your account is active. If you delete your account, your data will be removed within 30 days. Deleted courses are soft-deleted and fully removed after 30 days.

6. Your Rights

You have the right to: access your personal data; correct inaccurate data; delete your account and associated data; export your course content at any time. To exercise these rights, contact us through the Help & Support form in your dashboard.

7. Cookies

We use essential cookies for authentication (Supabase session cookies). Third-party analytics tools (Google Analytics, Hotjar) may set their own cookies for anonymous usage tracking.

8. Children

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children.

9. Changes to This Notice

We may update this privacy notice from time to time. We will notify you of significant changes via email or through the Service.

10. Contact

For privacy-related questions, contact us through the Help & Support form in your dashboard.