Privacy Policy

CourseEasy is a product of InfuseLabs Inc, a California corporation, 4089 Clemence Ct, Corona, CA 92881-5003, USA ("InfuseLabs," "we," "us"). This policy explains how CourseEasy handles personal information on our marketing website at www.courseeasy.com and our application at portal.courseeasy.com, and how we handle information about the people who contact us or hold an account with us.

When an organization uses CourseEasy to build and deliver courses to its own learners, that organization decides what material is uploaded and who may access it. In that relationship the organization is the data controller and CourseEasy acts as a processor on its instructions, under the agreement signed with that organization. If you are a learner and want to know how your data is handled, contact the school or employer that gave you access.

We keep collection deliberately narrow. There are four categories:

• Information you send us. When you submit the contact or demo form, we receive your name, email address, and optionally your company, company size, team type, and message. These fields are the entire form — we do not ask for anything else.
• Account information. When you create an account, we collect your name, email address, organization name and phone number (and, if you sign up with Google, the profile details Google shares with us). If your organization becomes a customer, we hold the billing details needed to invoice for the service.
• Technical information. Like any website, our hosting infrastructure logs basic request data such as IP address, browser type, referring page, and timestamp. This is used for security and reliability.
• Usage, device and marketing-attribution information. When you visit www.courseeasy.com or use the CourseEasy app at portal.courseeasy.com, we and our analytics and advertising providers collect information through cookies and similar technologies. This includes pages viewed, buttons clicked, the website or ad that referred you, campaign tags in the link you followed (such as utm_source or ref), advertising click identifiers (such as Google's gclid, gbraid and wbraid), approximate location derived from your IP address, browser and device type, and product events such as signing up, logging in, creating or publishing a course, and starting or completing a purchase. When you create an account, we store the campaign tags and click identifiers from your first and most recent visits with your account record so we can tell which marketing channels bring in customers.

We do not buy personal information from data brokers.

• To reply to your enquiry, arrange a demo, and answer questions about the product.
• To provide, secure, support, and improve the service for customers.
• To send service messages about your account, such as changes that affect how it works.
• To understand how visitors find and use CourseEasy, and to measure and improve our website, onboarding and marketing (analytics).
• To measure the results of our advertising, for example whether an ad click led to a sign-up, a first course or a purchase, and, where permitted, to show you CourseEasy ads on other sites (advertising).
• To meet legal, tax, and accounting obligations.

We do not sell personal information for money. We do use Google advertising services that may be considered "sharing" of personal information for cross-context behavioral advertising under California law; see "Your California privacy rights" below for how to opt out.

Where the GDPR or UK GDPR applies, we rely on the following bases: consent when you voluntarily submit a form or accept analytics and advertising cookies; performance of a contract when we provide the service to a customer; legitimate interests in securing our systems; and legal obligation where retention or disclosure is required by law. Analytics and advertising cookies and similar technologies are used on the basis of your consent where the GDPR, UK GDPR or ePrivacy rules require it (visitors in the EEA, the UK and Switzerland). Strictly necessary cookies are used on the basis of our legitimate interests in providing a secure, working site.

We use a small number of third parties to run the site and the service. Each one processes data on our behalf and is bound by contract to protect it:

• Google (Google Analytics 4, Google Tag Manager, Google Ads, including conversion tracking and enhanced conversions) — website and app analytics and advertising measurement. For enhanced conversions, a one-way hashed (SHA-256) version of your email address may be sent to Google to match a sign-up or purchase to an ad click; Google states it uses this only for matching and measurement. How Google uses data: https://policies.google.com/technologies/partner-sites
• Supabase — authentication and database hosting for the CourseEasy app.
• Stripe — payment processing for subscriptions, credit packs and creators' course sales. Stripe receives payment details directly; we don't store full card numbers.
• Formspree — receives and delivers submissions from the contact and demo form on this website.
• HubSpot — customer relationship management, managing enquiries and customer communications, including submissions from the corporate teams contact form.
• Cloud hosting and infrastructure providers — run the website, the application, and the databases that store customer content.
• AI model providers — process course briefs and uploaded source material to generate lesson content, assessments, and tutor responses, strictly to deliver the feature you requested.

We may also disclose information where we are legally required to, or to protect the rights and safety of CourseEasy, our customers, or the public.

We use cookies and similar technologies (such as local storage) on www.courseeasy.com and portal.courseeasy.com for three purposes: strictly necessary (keeping you signed in, security, remembering your cookie choices), analytics (understanding how the site and app are used), and advertising measurement (learning which ads and campaigns lead to sign-ups and purchases). We manage these through Google Tag Manager.

Your choices by region. We use Google Consent Mode. If you visit from the European Economic Area, the United Kingdom or Switzerland, analytics and advertising cookies are off until you accept them in our cookie banner; until then Google may receive limited, cookieless signals (no cookies are read or written) to model aggregate statistics. In other regions, including the United States, analytics and advertising cookies are on by default and you can turn them off at any time through Cookie settings in the footer. Do Not Sell or Share in the footer turns off only advertising (not analytics), as does enabling a Global Privacy Control signal.

Google Ads may also use enhanced conversions: when you sign up or buy, a hashed (SHA-256) version of your email address may be sent to Google to match the conversion to an ad click. We never send your email in readable form.

• Enquiry and demo-request details: kept while we are in contact and for a reasonable follow-up period afterwards, then deleted.
• Customer account and course data: kept for the life of the agreement, then deleted or returned according to that agreement.
• Google Analytics event data: retained for 14 months, after which it is deleted from our analytics reports.
• Marketing-attribution cookies: expire after 90 days.
• Attribution details stored with your account: kept for the life of your account and deleted with it.
• Server and security logs: kept for a short rolling period.
• Records we are legally required to keep, such as invoices: kept for the statutory period.

Data is encrypted in transit, access to production systems is restricted to staff who need it for their role, and customer workspaces are isolated from one another. No system is perfectly secure, but we treat customer material as confidential and design access controls on that basis.

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, restrict or object to how we use it, receive a portable copy, or withdraw consent you previously gave. Exercising these rights will never result in worse treatment from us.

You can also: change your cookie choices at any time through Cookie settings in the footer; control ad personalization in Google's My Ad Center; install the Google Analytics Opt-out Browser Add-on; and block or delete cookies in your browser settings.

To make other requests, email support@courseeasy.com. We will respond within the time required by applicable law. If you are a learner using CourseEasy through a school or employer, please direct your request to that organization first, since they control the data.

If you are a California resident, you have the right to know, delete and correct personal information we hold about you, and to not be discriminated against for exercising these rights.

Sale and sharing. We do not sell personal information for money. When analytics and advertising cookies are enabled, Google may receive identifiers and internet activity (such as cookie IDs, IP address, pages viewed and ad-click identifiers) to measure and personalize advertising. This may be considered "sharing" for cross-context behavioral advertising. In the past 12 months the categories shared were: identifiers and internet or other electronic network activity information. We do not knowingly sell or share personal information of consumers under 16.

How to opt out: click "Do Not Sell or Share My Personal Information" in the site footer, or turn on a Global Privacy Control (GPC) signal in your browser. We treat GPC as a valid opt-out of sale/sharing for that browser. To make other requests, email support@courseeasy.com. We verify requests by matching information in our records and respond within 45 days. Authorized agents may submit requests with your signed permission.

CourseEasy is sold to organizations, not directly to children. Where a school or district uses CourseEasy to deliver courses to students, the school remains the controller of student data and we act on its instructions as a processor. We do not use student personal information to build advertising profiles, and we do not sell it.

Analytics and advertising tags are not loaded on learner portals or creators' academy sites, and we do not use learner data for advertising.

If you believe a child has provided us personal information directly through this website, contact support@courseeasy.com and we will delete it.

We and our service providers may process information in countries other than your own. Where personal information covered by the GDPR or UK GDPR is transferred outside those regions, we rely on approved safeguards such as the European Commission's Standard Contractual Clauses.

We may update this policy as the product and the law evolve. The date at the top of this page always reflects the current version, and material changes will be communicated to customers through the service or by email.

Questions about this policy, or about how your information is handled, can be sent to support@courseeasy.com.

See also our Terms of Service.