CourseLoom Privacy Policy

1. Overview

This Privacy Policy explains how CourseLoom (“CourseLoom,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information when you access or use our website and services (the “Service”).

This Privacy Policy is intended to be read together with our Terms of Service.

2. Information We Collect

We collect the following categories of information:

• Information you provide directly: such as name, email address, account credentials, billing address (if provided), and customer support communications.
• Payment information: payments are processed by third-party payment processors (such as Stripe). We generally receive limited information about your payment method (for example, the last four digits of a card and payment status) and do not store full payment card numbers ourselves.
• Usage and content data: information about how you use the Service (e.g., features used, pages viewed, actions taken) and content you create, upload, or input into the Service.
• Device and technical data: such as IP address, browser type, device identifiers, operating system, and approximate location derived from IP address.
• Cookies and similar technologies: as described in Section 6.

3. How We Use Information

We use personal information to:

• Provide, operate, maintain, and improve the Service
• Create and manage accounts and authenticate users
• Process subscriptions and payments
• Send transactional messages (e.g., receipts, account notices, security alerts)
• Provide customer support and respond to requests
• Monitor, prevent, and investigate fraud, abuse, security incidents, and prohibited activity
• Comply with legal obligations and enforce our Terms of Service

We do not sell your personal information in exchange for money.

4. AI Content Processing

If you input content into the Service for AI-assisted generation, that content may be transmitted to third-party AI service providers to generate outputs.

• What may be processed: prompts, instructions, and related content you submit for generation, and the outputs returned.
• Purpose: to provide the AI-assisted features of the Service, troubleshoot issues, and improve the Service.
• Provider terms: our AI providers may process data under their own terms and our contractual arrangements with them.

Important: AI-generated content may be inaccurate or incomplete. You are responsible for reviewing outputs before using, publishing, or selling them.

5. How We Share Information

We may share personal information with:

• Service providers and vendors who help us operate the Service (for example, hosting, analytics, customer support tools, and email delivery)
• Payment processors (such as Stripe) to process transactions and help prevent fraud
• Legal and compliance recipients when required by law, regulation, legal process, or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, financing, reorganization, or sale of assets

We share only the information reasonably necessary for these purposes.

6. Cookies and Analytics

We use cookies and similar technologies for:

• Essential purposes: authentication, session management, and security
• Analytics: to understand how the Service is used and to improve performance and user experience

You can control cookies through your browser settings. If we implement a cookie banner or preference center, you may also be able to manage non-essential cookies through those controls.

7. Your Rights and Choices

Depending on where you live, you may have rights regarding your personal information, including the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Request deletion of personal information (subject to legal exceptions)
• Request a copy/portability of certain personal information

To make a request, contact us using the information in Section 11. We may need to verify your identity before fulfilling certain requests.

U.S. State Privacy Disclosures

If you are a resident of certain U.S. states, you may have additional rights, such as the right to opt out of certain types of processing (e.g., targeted advertising) and to appeal our decision regarding a request.

CourseLoom does not sell personal information for money. If we engage in targeted advertising or similar activities in the future, we will provide appropriate opt-out mechanisms.

8. Data Storage, Security, and International Transfers

We store and process information on servers operated by us and our service providers. Your information may be processed in the United States and other locations where our service providers operate.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit and at rest where appropriate. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information for as long as necessary to provide the Service and for legitimate business purposes, such as:

• Maintaining your account
• Complying with legal, tax, and accounting requirements
• Resolving disputes and enforcing agreements

If you delete your account, we will delete or de-identify personal information within a reasonable period, unless we are required or permitted to retain it longer for legal or compliance purposes. In many cases, we may retain certain records for up to 90 days after deletion (and longer where required by law).

10. Children’s Privacy

The Service is not intended for children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

11. Contact

If you have questions about this Privacy Policy or want to make a privacy request, contact us at support@course-loom.com or via /contact.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by posting an updated version on our website and/or via email or in-app notification. The “Last Updated” date above indicates when this Privacy Policy was last revised.