Back to CourseChat

Privacy Policy

Last updated: July 3, 2026

CourseChat (“the Service”) is operated from Canada. It is a platform where educators and course creators (“Providers”) offer a branded AI tutor to their students (“Students”). This policy explains what data we collect from both, how we use it, and your rights.

What we collect

Account information: Your name and email address, provided when you sign up or supplied by Google if you sign in with Google.

Provider content:Course materials Providers upload — documents, slides, pasted text, Q&A pairs, imported web pages — plus branding (logo, colors, tutor name) and tutor corrections.

Student activity:Chat conversations with the tutor, quiz results, and study activity. Providers can see their own Students' activity — questions asked, quizzes taken, and skill progress — as part of the Service. Students' data is visible only to their own Provider, never to other Providers or Students.

Payment information: Payments are processed by Stripe. We never see or store full card numbers; we store references such as customer and subscription identifiers, and for Providers, their connected Stripe account status.

Usage and error data: We collect basic analytics about how the Service is used (pages visited, features used) via PostHog, which may record session replays used solely to improve the product. We use error tracking that may capture technical details about failed requests.

How we use your data

To provide the Service:We store and process Provider content to power the AI tutor — search, chat answers, quizzes, and skill tracking for that Provider's Students.

AI processing: Content and chat messages are processed by third-party AI providers through their APIs to generate tutor responses and study aids. These providers do not use API inputs to train their models, per their respective terms of service.

Payments:We share what's necessary with Stripe to bill Providers, process Student subscriptions, and route funds to the Provider's Stripe account.

Email: We send transactional email (invites, password resets, receipts) through our email delivery provider.

Improvements: We use aggregated, non-identifying usage data to understand how the Service is used and to improve it.

What we don't do

  • We don't sell your personal data to anyone
  • We don't share one Provider's content or Student data with any other Provider — each tenant is fully isolated
  • We don't use your content to train AI models
  • We don't publish or redistribute Provider content outside that Provider's own tutor
  • We don't send marketing email to Students; Providers may receive occasional product updates in addition to essential account email

Data storage and retention

Data is stored on servers located in North America, in a PostgreSQL database on our infrastructure. We keep your data for as long as your account is active. If you delete your account — or a Provider deletes a Student — we delete the associated personal data; some data may persist in encrypted backups for up to 30 days. Financial records required for tax and accounting purposes are retained as required by law.

Your rights

Under Canadian privacy law (PIPEDA) and applicable provincial legislation, you have the right to:

  • Access your personal data — most of it is visible directly in the app
  • Correct inaccurate personal data — contact us to update your information
  • Delete your data — request account deletion by contacting us
  • Withdraw consent — you can stop using the Service at any time

Students should note that their Provider controls enrollment and course content; requests about a Provider's course material should go to the Provider.

Children

CourseChat is intended for adult learners and older students. We do not knowingly collect data from children under 16. Providers who enroll Students are responsible for ensuring their audience is age-appropriate and that any required consent is obtained.

Cookies

CourseChat uses cookies for authentication (keeping you signed in, including across a Provider's coursechat.app subdomain) and analytics. We do not use advertising cookies.

Sub-processors

We use third-party services for hosting, AI processing, payments (Stripe), authentication (Google sign-in), analytics, error tracking, and email delivery. These services process limited data as needed to perform their functions. A full list of sub-processors is available on request.

Changes to this policy

We may update this policy from time to time. We'll notify you of significant changes by posting a notice in the app.

Contact

For privacy questions or data requests, contact: elias@coursechat.app