Privacy Policy

This policy explains how CourseEasy handles personal information on our marketing website at www.courseeasy.com, and how we handle information about the people who contact us or hold an account with us.

When an organization uses CourseEasy to build and deliver courses to its own learners, that organization decides what material is uploaded and who may access it. In that relationship the organization is the data controller and CourseEasy acts as a processor on its instructions, under the agreement signed with that organization. If you are a learner and want to know how your data is handled, contact the school or employer that gave you access.

We keep collection deliberately narrow. There are three categories:

• Information you send us. When you submit the contact or demo form, we receive your name, email address, and optionally your company, company size, team type, and message. These fields are the entire form — we do not ask for anything else.
• Account and billing information. If your organization becomes a customer, we hold the account details needed to provide the service and invoice for it, such as names, work email addresses, and billing contacts.
• Technical information. Like any website, our hosting infrastructure logs basic request data such as IP address, browser type, referring page, and timestamp. This is used for security and reliability.

We do not buy personal information from data brokers, and we do not run advertising or behavioral tracking pixels on this site.

• To reply to your enquiry, arrange a demo, and answer questions about the product.
• To provide, secure, support, and improve the service for customers.
• To send service messages about your account, such as changes that affect how it works.
• To meet legal, tax, and accounting obligations.

We do not sell personal information, and we do not share it with third parties for their own marketing.

Where the GDPR or UK GDPR applies, we rely on the following bases: consent when you voluntarily submit a form; performance of a contract when we provide the service to a customer; legitimate interests in securing our systems and understanding how the site is used; and legal obligation where retention or disclosure is required by law.

We use a small number of third parties to run the site and the service. Each one processes data on our behalf and is bound by contract to protect it:

• Formspree — receives and delivers submissions from the contact and demo form on this website.
• Cloud hosting and infrastructure providers — run the website, the application, and the databases that store customer content.
• AI model providers — process course briefs and uploaded source material to generate lesson content, assessments, and tutor responses, strictly to deliver the feature you requested.

We may also disclose information where we are legally required to, or to protect the rights and safety of CourseEasy, our customers, or the public.

This marketing website does not set advertising cookies and does not embed third-party behavioral tracking scripts. Any cookies present are strictly necessary ones needed to serve the site and keep it secure.

The signed-in application uses essential cookies and similar storage to keep you logged in and remember your preferences. These cannot be switched off without breaking the product. If we introduce optional analytics in future, we will update this section and ask for consent where the law requires it.

• Enquiry and demo-request details: kept while we are in contact and for a reasonable follow-up period afterwards, then deleted.
• Customer account and course data: kept for the life of the agreement, then deleted or returned according to that agreement.
• Server and security logs: kept for a short rolling period.
• Records we are legally required to keep, such as invoices: kept for the statutory period.

Data is encrypted in transit, access to production systems is restricted to staff who need it for their role, and customer workspaces are isolated from one another. No system is perfectly secure, but we treat customer material as confidential and design access controls on that basis.

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, restrict or object to how we use it, receive a portable copy, or withdraw consent you previously gave. Exercising these rights will never result in worse treatment from us.

To make a request, email support@courseeasy.com. We will respond within the time required by applicable law. If you are a learner using CourseEasy through a school or employer, please direct your request to that organization first, since they control the data.

CourseEasy is sold to organizations, not directly to children. Where a school or district uses CourseEasy to deliver courses to students, the school remains the controller of student data and we act on its instructions as a processor. We do not use student personal information to build advertising profiles, and we do not sell it.

If you believe a child has provided us personal information directly through this website, contact support@courseeasy.com and we will delete it.

We and our service providers may process information in countries other than your own. Where personal information covered by the GDPR or UK GDPR is transferred outside those regions, we rely on approved safeguards such as the European Commission's Standard Contractual Clauses.

We may update this policy as the product and the law evolve. The date at the top of this page always reflects the current version, and material changes will be communicated to customers through the service or by email.

Questions about this policy, or about how your information is handled, can be sent to support@courseeasy.com.

See also our Terms of Service.