Privacy Policy

1. Introduction

Welcome to CourseSkul AI("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://courseskul.com and use our AI-powered course creation platform (collectively, the "Service").

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree with these terms, please do not access or use the Service.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide when you:

• Create an account (name, email address, password)
• Sign in with Google (see Section 13: Google User Data for full details)
• Subscribe to a paid plan (billing details processed by our payment provider, Paystack)
• Contact us for support
• Use our course creation tools (course topics, content you provide)

2.2 Information Collected Automatically

When you access the Service, we may automatically collect:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed, referring URL)
• Usage data (features used, courses created, interactions with the platform)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service
• Process your account registration and manage your subscription
• Generate AI-powered course content on your behalf
• Process payments through our payment provider (Paystack)
• Send transactional emails (e.g., account confirmation, course creation notifications)
• Respond to your inquiries and provide customer support
• Improve and personalise the Service
• Monitor usage patterns and analyse trends
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services to operate the platform:

• Google— OAuth 2.0 sign-in ("Sign in with Google"). See Section 13 for full details on Google user data handling.
• Supabase — Authentication, database, and file storage
• Anthropic (Claude) & OpenAI (GPT) — AI content generation for courses, quizzes, and lesson material
• ElevenLabs & OpenAI TTS — AI voiceover generation and voice cloning
• Paystack — Payment processing for subscriptions and course credit purchases
• Resend — Transactional email delivery

Each third-party service has its own privacy policy governing how they handle data. We encourage you to review their respective policies.

5. Data Storage and Security

Your data is stored securely using Supabase infrastructure. We implement industry-standard security measures, including:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Row-level security policies on database tables
• Secure authentication with hashed passwords
• Regular security audits and monitoring

While we strive to protect your personal information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyse usage of the Service.

• Essential cookies — Required for authentication and core functionality
• Analytics cookies — Help us understand how users interact with the platform

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

7. Your Rights

Depending on your location, you may have the following rights:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your personal data
• Data portability — Request a machine-readable copy of your data
• Objection — Object to the processing of your data in certain circumstances
• Withdraw consent — Withdraw any consent you have previously given

To exercise any of these rights, please contact us at [email protected].

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, unless retention is required by law.

AI-generated course content created through the Service is owned by you. Upon account deletion, this content will also be removed from our servers.

9. Google User Data

CourseSkul AI allows you to create an account or sign in using your Google account via OAuth 2.0 ("Sign in with Google"). This section specifically describes how we handle data received from Google APIs, in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

9.1 Google Data Accessed

When you choose to sign in with Google, we request only the following OAuth scopes:

• openid — To verify your identity
• email — Your Google account email address
• profile — Your display name and profile picture URL

We do not access your Google Drive, Google Calendar, Gmail, contacts, or any other Google service data. We do not request any sensitive or restricted Google API scopes.

9.2 How Google Data Is Used

The Google user data we receive is used solely for the following purposes:

• Authentication — To create your CourseSkul AI account and verify your identity when you sign in
• Account profile — To pre-fill your profile with your name and avatar so you do not have to enter them manually
• Transactional communication — To send you account-related emails (e.g., welcome email, course creation confirmations) using the email address associated with your Google account

We do not use Google user data for advertising, market research, or to train artificial intelligence / machine learning models.

9.3 Google Data Sharing

Google user data is shared only with the following categories of third-party service providers, strictly as necessary to operate the Service:

• Paystack(payment processor) — Your email and name are transmitted to Paystack when a payment customer record is created for subscription billing. Paystack's privacy policy is available at paystack.com/privacy.
• Resend(email delivery) — Your email and name are used by Resend to deliver transactional emails on our behalf. Resend's privacy policy is available at resend.com/legal/privacy-policy.

We do not sell, rent, or otherwise share Google user data with any other third parties. Google user data is never shared for advertising purposes or with data brokers.

9.4 Google Data Storage & Protection

Google user data is stored in our Supabase-hosted database and is protected by the same security measures described in Section 5 of this policy, including:

• Encryption in transit via TLS/SSL
• Encryption at rest on Supabase infrastructure
• Row-level security (RLS) policies that ensure users can only access their own profile data
• Service-role keys used only on server-side API routes, never exposed to the client

9.5 Google Data Retention & Deletion

Google user data is retained only for as long as your CourseSkul AI account is active. You may request deletion of your account and all associated data — including all Google-sourced data — at any time by:

• Emailing us at [email protected] with the subject line "Delete My Account"

Upon receiving a deletion request, we will delete your account and all associated personal data — including Google-sourced profile information (email, name, and avatar URL) — from our systems within 30 days. Data that has already been transmitted to third-party processors (Paystack, Resend) will be subject to those services' own data retention and deletion policies.

9.6 Google API Services Limited Use Disclosure

CourseSkul AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

10. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at: