Privacy Notice
Last updated: 20 August 2026
This working notice explains the product’s intended data practices. Controller identity, contact details, subprocessors, transfer safeguards, and the final retention schedule must be completed before public launch.
Information we process
- Account details such as email, display name, sign-in records, and administrator role.
- Purchase, refund, Offer, and course-access records.
- Your optional learner profile, including education level, experience, goals, strengths, challenges, and a resume if you upload one.
- Course plans, worksheet versions, quiz attempts, progress, career tools, portfolios, certificates, feedback, reviews, and Support messages.
- Security, audit, provider-event, and limited attribution records needed to operate the service and honor an eligible referral.
Why we use it
We process information to provide and secure Course access, save your work, grade objective quizzes, respond to Support, keep financial records, improve content, prevent abuse, and comply with legal obligations. Optional consent controls AI personalization and future marketing or opportunity emails separately.
AI personalization and queue assistance
If you opt in and request AI Review, we send only relevant, allowlisted profile facts and the specific work needed for that request. Administrators may also request an advisory AI summary and severity suggestion for a feedback, review, or Support submission so they can order the shared queue. In both cases, we record the prompt version, model, context used, and output. Queue assistance never hides or changes your original text and never makes a Support, publication, course-grade, employability, hiring, or job decision.
Publication and sharing
Course Reviews remain internal unless you give publication permission and Remote Academy separately selects an excerpt to publish. Support messages and lesson feedback are not testimonials. We do not connect learner records to Cherry Assistant or another recruitment database in this initial product.
Storage and retention
We retain active course records for as long as needed to provide supported access and keep saved work available. We retain purchase, security, consent, and audit records for defined legal and operational periods. When information is no longer authorized or needed for its stated purpose, it will be deleted or de-identified unless a lawful retention exception applies. We do not rely on an indefinite “keep everything unless asked” rule.
Your choices and rights
You can review or change your optional learner profile and consent choices. You may contact Support to request access, correction, export, objection, or deletion. Some records may be preserved where the law requires it or while a dispute is active, and we will explain that response.
Providers and international processing
Supabase supports authentication, database, and file storage; Stripe processes payments; Cloudflare Stream will host course video; and OpenAI will support optional AI tools and administrator-requested queue assistance. The final notice will name applicable entities, locations, safeguards, and current subprocessors before launch.
Contact
Until a dedicated privacy address is published, submit a privacy request through authenticated Support so we can verify and track it securely.