Privacy policy

Who we are

Coursento is operated by The-Code.ai Labs ("we", "us"). You can reach us about anything in this policy at privacy@coursento.com.

Our role

Organizations use Coursento in their own workspaces. The organization decides who joins, which courses people take and which features are on, so for data inside a workspace the organization is in charge of it and we process it on its behalf. Your organization's administrators can see and manage your data in their workspace.

For our own website, workspace sign-ups and our own accounts, we decide how the data is used.

What we collect

• Account details: your name, email address and password. Passwords are held by our sign-in service and we never see them. If you choose to sign in with Google, Microsoft or LinkedIn, we receive your name, email address and whether the address is verified, never your password there.
• Workspace details: your role, groups and any attributes your organization adds, such as department, job title or location.
• Learning records: enrolments, progress, time spent, answers, scores, assignments you submit, feedback and certificates.
• Content: courses, sources, files and briefs that authors add, and your conversations with the AI tutor and the course guide.
• Voice: when you talk to the course guide or dictate an answer, your microphone audio is sent to our speech service to turn it into text. We keep the text, not the audio.
• Sign-up details: the company name, workspace address, website and first-course idea you enter when you create a workspace.
• Billing details, when your organization pays through Coursento: the billing contact and records of payments. Card numbers go straight to our payment provider; we never see or store them.
• Technical data: IP addresses, used briefly to limit repeated attempts and to protect sign-up, and recorded for the actions of Coursento's own team; the date an API key was last used and from which address.

How we use it

We do not sell personal data and we do not use it for advertising. Coursento does not train AI models on your content.

• To provide Coursento: workspaces, courses, enrolments, progress, certificates and the emails that go with them.
• To run the AI features you use: writing and reviewing courses, pictures, narration, presenter videos, the AI tutor, grading suggestions and the assistant.
• To keep the service secure: sign-in, limiting repeated attempts, preventing abuse and keeping an audit trail.
• To bill your organization for what it uses, when billing is on.
• To answer support requests and meet our legal obligations.

AI services

Coursento's AI features send the content they work on to the AI services listed below: for example a source an author adds, a learner's question to the tutor, or an assignment a teacher asks the AI to suggest a grade for. They receive what each task needs, not your whole account.

AI output can be wrong or incomplete. Authors and teachers review what the AI suggests before learners rely on it.

Signing in with Google, Microsoft or LinkedIn

If you choose one of these, we receive your name, email address and whether that address is verified, and use them only to sign you in and to match you to the workspaces you belong to. We do not keep that provider's access to your account after you sign in.

Coursento's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Publishing videos to YouTube

If your organization connects its YouTube channel, Coursento uses YouTube API Services to upload the course videos you choose, with their titles and descriptions, to that channel. By connecting, you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms), and Google's Privacy Policy (https://policies.google.com/privacy) applies to what Google receives. Your organization can disconnect at any time in Coursento, and you can also remove Coursento's access in your Google account's security settings (https://myaccount.google.com/permissions).

Cookies and local storage

We use only the cookies Coursento needs to work: a session cookie that keeps you signed in (up to 8 hours), short-lived cookies that protect sign-in and connections to other services (up to 20 minutes), one that carries the course idea you typed on the home page into sign-up (1 hour), and preferences such as language, light or dark appearance and the sidebar's layout (up to 1 year). Your browser also keeps some preferences and, for offline learning, your progress until it syncs.

We use no advertising or analytics cookies. Workspace pages load fonts from Google Fonts, which receives your IP address. Interactive widgets in a course may load open-source code from public code networks.

Who we share it with

• Your organization: its administrators, and the managers and teachers it chooses, see the data of their workspace.
• The companies that process data for us, listed below, each only for its purpose.
• Services your organization connects, such as its learning management system, its people directory, its chat channels, its YouTube channel or its own webhooks. Their own terms apply to what they receive.
• Authorities, when the law requires it, and a successor if Coursento changes hands, under this policy.

Companies that process data for Coursento

These companies process personal data for us. We update this list before a new one starts.

Where your data is stored

Coursento's servers, database, files and backups are in the United Arab Emirates. When you use an AI feature, sign in through another provider, or your organization turns on an integration, the data that feature needs is processed by the companies above, in the countries shown, including the United States and the European Union.

How long we keep it

We keep your data while your account or your organization's workspace exists. Some things go sooner: open course drafts after 30 days without use, the course guide's conversations 30 days after a course is made, sign-up protection records within 7 days, logs of webhook deliveries after 30 days, and exported videos after 30 days. Backups are kept for 7 days.

When your organization erases you, your personal data is removed or anonymized across Coursento. When a workspace is deleted, its data is deleted with it.

Your rights

You can ask to see, correct, export or erase your personal data, or object to how it is used. Inside a workspace, your organization's administrators can export or erase a person's data with Coursento's privacy tools, so ask them first. You can also write to privacy@coursento.com, and we will answer within 30 days. You may also complain to your data protection authority.

Security

Connections to Coursento are encrypted. Each workspace's data is kept apart from every other's in the database, secrets such as keys and tokens are encrypted when stored, and only Coursento team members who need access have it, with their actions recorded. No service can promise perfect security; if a breach affects your data, we will tell you and your organization as the law requires.

Children

Coursento is made for organizations. It is not directed to children under 13 on their own; when a school or another organization adds younger learners, it is responsible for having the consent the law requires.

Changes to this policy

When we change this policy we update the date at the top. If a change matters to how your data is used, we will tell workspace owners before it takes effect.

Contact

The-Code.ai Labs, operator of Coursento: privacy@coursento.com.