Privacy Policy

My Course Academy is a marketplace and course-hosting platform operated from the State of Idaho, United States. We connect independent course creators ("Creators") with students who purchase access to their courses. We act as a service provider and platform operator, not as a creator or seller of the underlying course content.

Information you provide directly:

• Account information: name, email address, password, profile photo, and any bio or credentials you choose to add.
• Creator and storefront information:storefront slug, display name, cover images, logos, brand colors, descriptions, and embed preferences.
• Course content: course metadata, sections, chapters, videos, slide decks, and any files you upload as a Creator.
• Payment information: we do not store full credit card numbers. Payment details are collected and processed by Stripe, our payment processor. We receive and store transaction IDs, subscription status, plan tier, and purchase history.
• Communications: messages you send to support or other users through the Platform.

Information collected automatically:

• Device and log data: IP address, browser type and version, operating system, device identifiers, pages viewed, time spent, timestamps, and referring URLs.
• Usage data: video watch progress, chapter completions, course enrollments, storefront views, embed impressions, and feature usage.
• Cookies and similar technologies: we use cookies and local storage to keep you signed in, remember your theme preference, understand how users interact with the Platform, and support analytics. See Section 9 for more details.

We use your information to:

• Provide, operate, and improve the Platform and its features.
• Create and manage your account, authenticate you, and keep you signed in.
• Process purchases, subscriptions, payouts, and refunds.
• Deliver purchased courses and track your progress.
• Display public creator storefronts, course listings, and embeddable widgets.
• Communicate with you about your account, transactions, security, and support.
• Enforce our Terms of Use, prevent fraud, and protect the security of the Platform.
• Comply with legal obligations and respond to lawful requests.
• Analyze usage trends to improve performance and user experience.

We do not sell personal information. We may share information in the following ways:

• With Creators: when you purchase a course, the Creator may see that you have enrolled, your progress, and your account display name. Creators do not receive your full payment card information.
• Service providers: we share data with trusted vendors who help us operate the Platform, including Stripe (payments), Cloudflare Stream (video hosting and streaming), Supabase/Lovable Cloud (database, auth, and hosting), email delivery providers, and analytics providers. These vendors are contractually obligated to use data only for the services they provide to us.
• For legal or safety reasons: we may disclose information if required by law, court order, or legal process, or if we believe it is necessary to protect our rights, users, or the public.
• Business transfers: if we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

All payments are processed by Stripe. When you make a purchase or subscribe to a Creator plan, you provide payment information directly to Stripe. Stripe's use of your information is governed by its Privacy Policy. We store only the information necessary to confirm the transaction, provide access, calculate payouts, and comply with tax and accounting obligations.

We use commercially reasonable administrative, technical, and physical safeguards to protect your information. This includes encryption in transit (TLS/HTTPS), access controls, row-level security policies in our database, and signed, short-lived URLs for video playback.

No method of transmission or storage is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security. If we learn of a data breach that affects your personal information, we will notify you as required by applicable law, including Idaho's data breach notification requirements.

We keep your information for as long as your account is active or as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information within a reasonable time, except where we must retain it for legal, tax, accounting, or fraud-prevention purposes.

Depending on your location, you may have the right to:

• Access, update, or correct the personal information in your account.
• Request deletion of your account and personal data.
• Object to or restrict certain processing of your information.
• Withdraw consent where processing is based on consent.
• Receive a copy of your data in a portable format.

To exercise these rights, contact us at the email address in Section 15. We will respond within the timeframes required by applicable law. Idaho residents may contact us with questions or concerns about this Privacy Policy at any time.

We use cookies and similar technologies for authentication, preferences (such as theme selection), security, and analytics. You can control cookies through your browser settings. Disabling certain cookies may affect your ability to use some features of the Platform.

The Platform is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us and we will delete it promptly.

The Platform may contain links to third-party websites or allow Creators to embed content on external sites. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

My Course Academy is based in the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Platform, you consent to this transfer.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. For registered users, we may also notify you by email. Your continued use of the Platform after changes take effect means you accept the revised policy.

This Privacy Policy and any disputes arising from it are governed by the laws of the State of Idaho, without regard to conflict-of-law principles. You agree that any legal action relating to this Privacy Policy will be brought in the state or federal courts located in Idaho.

If you have questions, concerns, or requests about this Privacy Policy or our data practices, contact us at support@mycourseacademy.com.