Privacy Policy

This privacy notice for Coursology, LLC, 600 Broadway Ste 200, Albany, NY, 12207, USA, United States ("Company," "we," "us," or "our") informs you about personal information we collect through our website available at: https://coursology.com/ (“Website”), our browser extensions — the Coursology extension and the Coursology Discuss extension (each an “Extension,” together the “Extensions”) — our mobile applications, and through our services that we provide (“Services”), or when you engage in sales, marketing, or events with us. It explains how we collect, use, share, store, and protect your personal information, your rights and choices, and how you can contact us about our privacy practices. We respect your privacy and are committed to complying with the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR). If you have any questions or concerns regarding data protection, please contact us at team@coursology.com.

Personal Information

The subject matter of data protection is your personal information. That is all the information that relates to you (as an identified or identifiable individual). This covers for example, information such as name, postal address, e-mail address, or telephone number as well as information that necessarily originates from the use of our Website, such as details about the start, end, and scope of use, and the communication of your IP address.

The Types of Personal Information

We collect and process various types of personal information, including your name, email address, password, username, billing address, and debit/credit card number. We do not process any sensitive personal information, such as health, biometric, or genetic data.

Personal Information Collection

We collect personal information based on your interaction with us online, by visiting our Website, and by using our Services. We may collect your personal information through any of the following methods:

1. Direct interactions where you provide us with identity, profile, contact, financial, and transaction data through completing documentation for us or communicating by phone, e-mail, post, via our Website or otherwise. This includes personal information that is provided to us when you:

   • Access or use our Website or our Services;
   • Register an account. This may include social media login data if you register using your social media accounts, such as Facebook or Twitter;
   • Subscribe to our Services;
   • Purchase information - we collect payment data for purchases and store it securely with Stripe, our payment processor. You can find Stripe's privacy notice here;
   • Provide us with feedback;
   • Otherwise contact us, or our registered partners in the course of our business.

2. Automated technology and data where you interact with our Website and/or our Services, we automatically collect technical, usage, and marketing or communications data. We collect this personal information using particular service providers, cookies, and server logs/log files. This includes:

   • Browser and device information that is collected by most browsers or automatically through your device, such as your IP address, computer type, screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type, and add-ons;
   • Log Information that is automatically collected in system logs about how you interact with our Website, such as your online activity, search terms, pages you visit, date, and time of access. This information is used to improve your experience on our Website and keep the Website free of bugs and errors;
   • Cookies and similar technologies which serve us to communicate with your end device and exchange stored information. These cookies are provided by third-party service providers (including Google Analytics, Mixpanel, Facebook Ads, HotJar, Klaviyo, TikTok, Snapchat, Google Adsense, LeadDyno, Rewardful, Braintree, Google Pay, Apple Pay, Venmo, PayPal, PostHog) and will be used to improve the performance and design of the Website. We will obtain your consent to our use of cookies where required by law.

3. Third parties or publicly available sources where your personal information is made available as follows:

   • Technical data from advertising networks, search information providers, and analytics providers (including Google Analytics);
   • Contact, financial, and transaction data from technical and payment services connected to our Services;
   • Identity and contact data made available from public sources, law enforcement, or government entities (as applicable);
   • Identity and contact data from third-party applications where services require the import of information about users and their clients to fulfill activities and facilitate payments.

Coursology Browser Extensions

We offer two browser extensions: the Coursology extension, our main AI study assistant, and the Coursology Discuss extension, which helps you draft class discussion posts and replies. This section, together with the rest of this notice, comprehensively discloses all user data the Extensions collect, how that data is used, handled, and stored, and all parties it is shared with. Unless a specific Extension is named, the disclosures below apply to both Extensions.

Data the Extensions collect:

• Account and authentication data. When you sign in, the Extensions read your Coursology session cookie on our own domains (coursology.com and coursology.io) to authenticate you and connect your activity to your account and subscription. The Extensions do not read cookies from any other website.
• Content you choose to capture (Coursology extension). When you actively use a feature, the Coursology extension collects the content needed to fulfill your request: text you select or highlight, screenshots of the page area you choose to capture, question content detected on supported learning platforms where you use the extension (such as Canvas, Blackboard, Brightspace, Moodle, and Google Docs), messages you type into the chat, and study materials (such as documents and files) you upload.
• Audio recordings (Coursology extension). If you use the recording/transcription feature, the extension captures audio and streams it to our transcription provider to convert it into text. Audio is captured only while you have recording actively turned on.
• Discussion content (Coursology Discuss extension). When you open Coursology Discuss on a class discussion page (such as a Canvas discussion), it collects the page content needed to draft your post or reply — the discussion prompt and instructions, assignment requirements, and existing posts in the thread — together with the drafts you create, messages you type into the drafting chat, screenshots you choose to capture, and source documents you upload to your source library.
• Settings and preferences. Your Extension settings (such as feature toggles, appearance, and keyboard shortcuts) are stored locally in your browser's extension storage.
• Technical and diagnostic data. Basic device and browser information (such as browser type and version, operating system, and language), usage information about how you use Extension features, and error and crash reports needed to keep the Extensions working correctly.

How the Extensions use this data. We use data collected through the Extensions solely to provide and improve the Extensions' user-facing features and our Services: to generate the answers, explanations, chats, summaries, transcriptions, and discussion drafts and replies you request; to authenticate you and apply your subscription; to remember your settings; to provide customer support; and to diagnose and fix errors. We do not use Extension data for personalized advertising, and we do not use it to determine creditworthiness or for lending purposes.

How Extension data is stored and handled. Content you submit through the Extensions and the results generated for you are transmitted using encryption in transit (HTTPS/TLS) and stored on our secure servers in the United States, hosted on Google Cloud Platform / Firebase and — for source documents you upload to the Coursology Discuss source library — Vercel's file storage. Your settings are stored locally in your browser and are removed when you uninstall the Extension. Server-side data is retained in accordance with the "Information Retention" section of this notice, and you may request its deletion at any time as described in the "User Rights" section.

Parties Extension data is shared with. We share data collected through the Extensions only with the service providers required to operate the features described above, and only for the purposes described in this notice:

• Artificial intelligence model providers — OpenAI, Anthropic, Amazon Web Services (Amazon Bedrock), and Cohere: receive the content you submit (selected text, captured screenshots, detected question and discussion content, chat messages, and uploaded materials and sources) solely to generate the answer, explanation, draft, or other output you request.
• AssemblyAI: receives audio you record through the Coursology extension's transcription feature solely to convert it into text.
• Google Cloud Platform / Firebase (Google LLC): hosts our servers, databases, authentication, and file storage.
• Vercel Inc.: provides file storage for source documents you upload to the Coursology Discuss source library.
• Sentry (Functional Software, Inc.): receives error and crash reports, including browser and device information, to help us diagnose and fix bugs.
• Analytics providers (PostHog, Google Analytics, Mixpanel): receive usage information to help us understand and improve how the Services are used.
• Stripe: processes payments if you purchase a subscription (purchases take place on our Website, not inside the Extensions).

We do not sell Extension user data, we do not share it with data brokers or advertising networks, and we do not transfer it to any party other than those listed above, except where required by law (as described in the "Information Sharing" section).

Data the Extensions do not collect. The Extensions do not collect your browsing history and do not log your keystrokes. The Coursology extension's content scripts are excluded from banking and financial websites, and neither Extension collects financial account information. Coursology Discuss reads page content only on class discussion pages where you open it. Page content is transmitted to our servers only when you use an Extension feature that requires it.

Chrome Web Store compliance. The Extensions' use and transfer of user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Data collected by the Extensions is used only to provide or improve their user-facing features, is transferred only to the parties listed above, and is never sold, used for advertising, or used to determine creditworthiness or for lending purposes.

Information Processing

We process your personal information for the following purposes:

• To provide and improve our Services, such as creating your account, delivering your courses, and providing customer support.
• To communicate with you, such as sending you service updates, newsletters, and marketing offers, subject to your preferences and consent.
• To ensure security and fraud prevention, such as verifying your identity, detecting and preventing unauthorized access, and protecting our rights and property.
• To comply with the law, such as responding to legal requests, enforcing our terms and conditions, and protecting our legitimate interests.

How We Use Your Personal Information, Purposes and Legal Basis.

We use your personal information as permitted by applicable law to operate, provide, develop and improve the Services. We are subject to the General Data Protection Regulation (EU) 2016/679 (GDPR) when processing personal data of data subjects located in the European Union. Under the GDPR we are the data processor and data controller for your personal information when you access and use our Website and Services. We process your personal information based on valid legal reasons, which may include your consent, our contractual obligations, our legal obligations, our vital interests, or our legitimate interests. We will inform you of the specific legal basis for each processing activity when we collect your personal information, or as soon as possible thereafter. You can withdraw your consent at any time, where applicable, by contacting us or using the opt-out links provided in our communications.

Information Sharing

We share your personal information only as described in this notice and only with the following categories of recipients:

• Payment processors: Stripe, Braintree, PayPal, Venmo, Google Pay, and Apple Pay, which process your payment information when you make purchases. We do not store your full card details ourselves.
• Cloud hosting and infrastructure providers: Google Cloud Platform / Firebase (Google LLC) and Vercel Inc., which host our servers, databases, authentication, and file storage.
• Artificial intelligence service providers: OpenAI, Anthropic, Amazon Web Services (Amazon Bedrock), and Cohere, which process content you submit (such as questions, selected text, captured screenshots, chat messages, and uploaded materials) solely to generate the responses you request; and AssemblyAI, which transcribes audio you record.
• Analytics providers: Google Analytics, Mixpanel, PostHog, and HotJar, which receive usage information to help us understand and improve the Services.
• Error monitoring providers: Sentry (Functional Software, Inc.), which receives error and crash reports to help us fix bugs.
• Marketing, advertising, and affiliate partners (Website only): Facebook Ads, TikTok, Snapchat, Google AdSense, Klaviyo, LeadDyno, and Rewardful, which may collect information through cookies on our Website as described in the cookies section below. These partners do not receive data collected through the Extensions.

We only share your personal information with third parties who have agreed to process it in accordance with our instructions and this privacy notice, and who have implemented appropriate technical and organizational security measures to protect it.

We may also share your personal information with public authorities, law enforcement agencies, courts, or other parties, if required or permitted by law, such as to comply with a legal obligation, to protect our rights or interests, or to defend ourselves from claims.

We do not sell or rent your personal information to third parties for their own purposes, unless you have given us your explicit consent.

Use of Cookies and Tracking Technologies

We may use cookies and similar technologies to collect and store information about your use of our Services, such as your preferences, settings, and login status. Cookies are small files that are placed on your device when you visit our website. You can refuse or delete certain cookies through your browser settings, but some features of our Services may not function properly without them.

We also use Google AdSense and other third-party advertising companies to display ads on our website, based on your browsing history and interests. These companies may use cookies and other tracking technologies to collect information about your visits to our website and other websites, such as your IP address, device identifiers, and web pages viewed. You can opt out of the use of the DoubleClick DART cookie by visiting the Google ad and content network privacy policy. You can also opt out of the use of cookies by some third-party advertisers by visiting the Network Advertising Initiative opt-out page.

Third Party Platforms Logins

If you register or log in to our Services using your account details from a third party platform, such as Google or Apple, we may receive information from those providers, such as your name, email address, and profile picture. The information we receive depends on your privacy settings and the terms and policies of the third party platforms. We use this information to create and manage your account, and to personalize your experience on our Services. You can revoke our access to your third party platform accounts at any time by changing your settings on those platforms.

Information Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, or as required by law. We will delete or anonymize your personal information when it is no longer needed, or upon your request, unless we have a legal obligation or a legitimate interest to keep it. We will also erase your personal information if we are obliged to do so for other legal reasons. Applying these general principles, we will usually erase your personal information immediately after the legal permission has ceased to apply and provided that no other legal basis (e.g. commercial and tax law retention periods) intervenes. If the latter applies, we will delete the data after the other legal basis has ceased to apply. We will also usually erase your personal information if we are no longer required to hold it for the purposes we pursue and no other legal basis intervenes, if the latter is the case, we will delete the data after the other legal basis has ceased to apply.

Information Security

We use organizational and technical security measures to protect your personal information from unauthorized access, use, disclosure, modification, or destruction. These measures include encryption, firewalls, access controls, and staff training. However, we cannot guarantee that your personal information is completely secure, as no method of transmission or storage over the internet is 100% secure. If you suspect any breach of your personal information, please contact us immediately.

International Information Transfers

We may transfer your personal information to recipients in countries other than the country in which the information was originally collected. These countries may have different data protection laws than the country in which you provided the information.When we transfer your information to other countries, we will protect that information as described in this Privacy Policy and in accordance with applicable law. We store the information we collect in secure servers located in the United States. We rely on adequacy decisions by the European Commission, standard data protection clauses, or other legal basis for the transfer of personal information from the European Economic Area or the United Kingdom to the United States.

User Rights

Depending on your location, you may have certain rights regarding your personal information, such as:

• The right to access your personal information and receive a copy of it.
• The right to rectify your personal information if it is inaccurate or incomplete.
• The right to erase your personal information or restrict its processing, under certain conditions.
• The right to object to the processing of your personal information, under certain conditions.
• The right to data portability, which means to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit it to another controller, under certain conditions.
• Right to restriction of the processing of your personal information enables you to ask us to suspend the processing of your personal information in the following situations:
  • If our use of the personal information is unlawful, but you do not want us to delete it; or
  • If you require us to hold the personal information, even if we no longer require it, because you need it to establish, exercise or defend legal claims; or
  • If you have objected to our use of your personal information but we need to verify whether we have overriding legitimate interest to use it; or
  • If you want us to establish your personal information’s accuracy.
• The right to withdraw your consent to the processing of your personal information, where applicable, at any time.
• The right to lodge a complaint with a supervisory authority if you are unhappy with how we handle your personal information.

You can exercise your rights by contacting us or using the data subject request form available here. We will respond to your request within a reasonable time frame, or as required by law. We may ask you to verify your identity before fulfilling your request, to protect your privacy and security.

Do-Not-Track Features

Some browsers have a "do-not-track" feature that lets you tell websites that you do not want to have your online activities tracked. We do not currently respond to these signals, as there is no common standard for how to do so. However, you can opt out of some of our tracking technologies by following the instructions in the section on cookies and tracking technologies above.

California Privacy Rights

If you are a California resident, you have additional rights under the CCPA, such as:

• The right to know what personal information we collect, use, disclose, and sell about you, and the categories and sources of such information.
• The right to request that we delete your personal information, subject to certain exceptions.
• The right to opt out of the sale or sharing of your personal information to third parties for their own purposes, if we engage in such practices.
• The right to non-discrimination, which means that we will not deny you our Services, charge you different prices, or provide you with a lower quality of service if

you exercise your rights under the CCPA.

To exercise your rights under the CCPA, you can contact us or use the data subject request form available here. We will respond to your request within 45 days, or as required by law. We may ask you to verify your identity before fulfilling your request, to protect your privacy and security.

California residents also have the right to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties, under the "Shine The Light" law. If you are a California resident and would like to make such a request, please contact us at the address below.

Children Under 13

We do not knowingly direct our Services to children under the age of 13. The minimum age to use the Services may differ depending on the country or region you are in. If you believe that we have collected personal information from a minor under the minimum age, please contact us at: team@coursology.com.

Notice Updates

We may update this privacy notice from time to time to reflect changes in our data practices, laws, or regulations. We will notify you of any significant changes by posting the updated notice on our website, with the revised date at the top. We encourage you to review this notice periodically to stay informed about how we protect your personal information.

Contact Information

If you have any questions, comments, or requests regarding this privacy notice or our data practices, please contact us at:

Coursology LLC
600 Broadway Ste 200
Albany, NY, 12207, USA
United States
team@coursology.com