Last Updated: January 11, 2025
We take your privacy seriously. This Privacy Policy explains how Caring CourseForge, operated by Caring Consulting Co. LLC ("we," "us," or "our"), collects, uses, shares, and protects your personal information when you use our service. By using Caring CourseForge, you agree to the practices described in this policy.
1. Information We Collect
1.1 Information You Provide
We collect information that you voluntarily provide when you:
- Create an account: Email address, password, display name, and optional profile photo
- Use our services: Course content, lesson materials, quizzes, user-generated content, and preferences
- Subscribe to paid plans: Billing information (processed securely by Stripe), payment history, and subscription details
- Contact us: Name, email address, and message content when you reach out for support
1.2 Information Collected Automatically
When you use our service, we automatically collect:
- Account activity: Login timestamps, authentication tokens, and session information via Firebase Authentication
- Usage data: Course interactions, feature usage, time spent on platform, and user preferences
- Device information: Browser type, operating system, device identifiers, and IP address
- Technical data: Error logs, performance metrics, and diagnostic information
1.3 AI-Generated Content
When you use our AI-powered features, we process your prompts and course content through third-party AI services (Anthropic Claude and Google Gemini) to generate course materials. This content is used solely to provide the requested service and is not used to train AI models.
2. How We Use Your Information
We use the information we collect to:
- Provide the service: Enable account access, save your courses, and deliver core functionality
- Process payments: Handle subscription billing, refunds, and payment history through Stripe
- Improve our service: Analyze usage patterns, fix bugs, and develop new features
- Communicate with you: Send service updates, respond to support requests, and deliver important notifications
- Ensure security: Detect and prevent fraud, abuse, and unauthorized access
- Comply with legal obligations: Meet regulatory requirements and respond to legal requests
- Generate AI content: Process your prompts through AI services to create course materials
3. How We Share Your Information
3.1 Third-Party Service Providers
We share your information with trusted service providers who help us operate our platform:
- Firebase (Google): Authentication, database hosting, and cloud storage
- Stripe: Payment processing and subscription management
- Anthropic Claude: AI content generation services
- Google Gemini: AI content generation and image generation
- SendGrid: Email delivery for transactional messages
These providers are contractually obligated to protect your data and use it only for the services they provide to us.
3.2 Legal Requirements
We may disclose your information if required to:
- Comply with legal obligations, court orders, or government requests
- Protect our rights, property, or safety
- Investigate fraud, security issues, or violations of our Terms of Service
- Enforce our legal rights and agreements
3.3 Business Transfers
If Caring CourseForge is acquired, merged, or undergoes a business restructuring, your information may be transferred to the successor organization. We will notify you of any such change.
3.4 With Your Consent
We may share your information for other purposes with your explicit consent.
4. Your Data Rights
4.1 Access and Portability
You have the right to:
- Access your personal data
- Download your course content and materials
- Export your data in a portable format
- Request a copy of the information we hold about you
4.2 Correction and Deletion
You can:
- Update your account information at any time
- Request correction of inaccurate data
- Delete your account and personal information
- Request deletion of specific data
4.3 Control and Consent
You may:
- Opt out of marketing emails (transactional emails will continue)
- Control data sharing settings in your account
- Withdraw consent for optional data processing
- Object to certain types of data processing
4.4 Exercising Your Rights
To exercise these rights, contact us at privacy@courseforge.com. We will respond within 30 days.
5. Data Retention
We retain your information for as long as:
- Your account is active
- Needed to provide you with services
- Required by law or for legitimate business purposes
- Necessary to resolve disputes or enforce agreements
After account deletion, we retain some information for:
- 30 days: Personal data (then deleted or anonymized)
- 90 days: Backup copies (then permanently deleted)
- As required by law: Tax records, transaction history (typically 7 years)
6. Data Security
6.1 Security Measures
We protect your data with:
- Encryption: AES-256 encryption for data at rest, TLS 1.3 for data in transit
- Access controls: Role-based permissions and multi-factor authentication
- Monitoring: 24/7 security monitoring and threat detection
- Audits: Regular security audits and penetration testing
- Compliance: SOC 2 Type II certification
6.2 Your Responsibilities
To keep your account secure:
- Use a strong, unique password
- Enable multi-factor authentication
- Keep your login credentials confidential
- Log out on shared devices
- Report suspicious activity immediately
6.3 Data Breaches
In the unlikely event of a data breach, we will:
- Notify affected users within 72 hours
- Inform relevant authorities as required by law
- Take immediate action to contain and remediate the breach
- Provide guidance on protective measures
7. Cookies and Tracking
7.1 Cookies We Use
- Essential cookies: Required for authentication and basic functionality
- Analytics cookies: Help us understand how you use our service
- Preference cookies: Remember your settings and preferences
7.2 Cookie Control
You can:
- Disable cookies in your browser settings
- Opt out of analytics tracking
- Delete existing cookies
Note: Disabling essential cookies may limit service functionality.
7.3 Third-Party Tracking
We do not allow third-party advertising or tracking cookies on our platform.
8. Children's Privacy
8.1 Age Requirements
- General use: Must be 13+ years old (16+ in the EU)
- Under 18: Requires parental/guardian consent
- Under 13: Not permitted to create accounts
8.2 COPPA Compliance
If you create courses for children under 13:
- You must obtain verifiable parental consent
- You are responsible for COPPA compliance
- Do not collect personal information from children without consent
8.3 Educational Use (FERPA)
For educational institutions subject to FERPA:
- We act as a "school official" with legitimate educational interests
- Student data is used only for educational purposes
- We maintain appropriate security safeguards
- Student data is not sold or used for marketing
9. International Data Transfers
9.1 Data Storage
Your data is primarily stored in the United States on Google Cloud Platform servers.
9.2 EU and UK Users
For users in the European Union and United Kingdom:
- We rely on Standard Contractual Clauses for data transfers
- Your data is protected under GDPR
- You have additional rights under GDPR (see Section 4)
- You may lodge complaints with your local data protection authority
9.3 Other Jurisdictions
We comply with applicable data protection laws in all jurisdictions where we operate.
10. Third-Party Links
Our service may contain links to third-party websites, services, or integrations. This Privacy Policy does not apply to those external services. We are not responsible for their privacy practices.
11. AI and Data Processing
11.1 AI Service Providers
We use the following AI services:
- Anthropic Claude: Text generation, content improvement, and course creation assistance
- Google Gemini: Multi-modal AI including text and image generation
11.2 Data Processing
When you use AI features:
- Your prompts and inputs are sent to AI service providers
- AI providers process data to generate requested content
- Data is not used to train AI models (per our agreements)
- Generated content belongs to you
11.3 AI Limitations
AI-generated content:
- May contain errors or inaccuracies
- Should be reviewed and validated by you
- Is your responsibility once generated
- May not be subject to copyright in all jurisdictions
12. California Privacy Rights (CCPA)
12.1 Information Collection
California residents have the right to know:
- What personal information we collect
- How we use and share it
- Why we collect it
- Whether we sell personal information (we don't)
12.2 Your Rights
Under CCPA, you may:
- Request access to your personal information
- Request deletion of your personal information
- Opt out of the "sale" of personal information (not applicable)
- Not be discriminated against for exercising your rights
12.3 Exercising Rights
Contact us at privacy@courseforge.com with your request. We will respond within 45 days.
13. Updates to This Policy
13.1 Policy Changes
We may update this Privacy Policy to reflect:
- Changes in our practices
- New features or services
- Legal or regulatory requirements
- Feedback from users
13.2 Notification
We will notify you of material changes by:
- Posting a notice on our website
- Sending an email to your registered address
- Displaying a notification in the service
- Updating the "Last Updated" date at the top of this policy
13.3 Continued Use
Your continued use of the service after changes take effect constitutes acceptance of the updated policy.
14. Contact Us
14.1 Privacy Questions
For privacy-related inquiries:
- Email: privacy@courseforge.com
- Support: support@courseforge.com
- Data Protection Officer: dpo@courseforge.com
14.2 Data Requests
To exercise your data rights:
- Email privacy@courseforge.com
- Include your account email and specific request
- We will respond within 30 days
14.3 Complaints
If you have concerns about our data practices:
- Contact us first at privacy@courseforge.com
- EU/UK residents may contact your local data protection authority
- California residents may contact the California Attorney General
15. Additional Information
15.1 Do Not Track
Some browsers offer "Do Not Track" (DNT) signals. We respect DNT signals and do not track users who have enabled this setting.
15.2 Automated Decision Making
We do not use your personal information for automated decision-making that significantly affects you.
15.3 Marketing Communications
You will only receive marketing emails if you:
- Opt in during account creation
- Subscribe to our newsletter
- Request marketing materials
You can unsubscribe at any time using the link in any marketing email.
Effective Date: January 11, 2025
For the most current version of this Privacy Policy, please visit: https://courseforge.caringai.app/privacy
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@courseforge.com.