Privacy Policy

1. Introduction

CoursePrep ("we", "our", or "us") operates courseprep.xyz. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using CoursePrep, you agree to the practices described here.

2. Information We Collect

We collect the following categories of information:

• Account information: Your email address, full name, and university name when you create an account.
• Uploaded materials: PDF files you upload to your courses. These are stored in our cloud storage and processed to extract text for AI features.
• AI interactions: Questions you submit to the AI tutor and quizzes you generate. These are used to retrieve relevant content from your materials and generate responses.
• Course data: Course names, descriptions, and visibility settings you configure.
• Payment information: If you upgrade to Pro, payment is processed by Stripe. We store only your Stripe customer ID — we never see or store your card number.
• Usage data: Standard server logs including IP addresses, browser type, and pages visited, used for security and performance monitoring.

3. How We Use Your Information

• To provide and improve the CoursePrep service, including AI-powered study tools.
• To process your uploaded documents into searchable embeddings for the AI tutor and quiz features.
• To manage your account, subscription status, and plan limits.
• To communicate important service updates or changes to this policy.
• To detect and prevent fraud, abuse, or security incidents.

4. Third-Party Services

CoursePrep relies on the following third-party providers to deliver its service. Each has its own privacy policy:

• Supabase — database, authentication, and file storage. Your account data and uploaded files are stored on Supabase infrastructure.
• OpenAI — generates vector embeddings from your document text to enable semantic search. Text chunks from your documents are sent to OpenAI's API for this purpose.
• Anthropic — powers the AI tutor, quiz generation, and course summary features. Relevant excerpts from your documents and your questions are sent to Anthropic's Claude API.
• Stripe — handles all payment processing for Pro subscriptions. Stripe's privacy policy governs how they handle your payment information.

We do not sell your personal data to any third party.

5. Public Courses

If you set a course to "public," its name, description, university, and course summary become visible to all CoursePrep users via the Discover feature. The underlying documents you uploaded remain private and are never shared publicly. You can make a course private again at any time from your Courses page.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your profile, courses, and uploaded documents within 30 days. Stripe may retain payment records as required by law or their own policies.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Export your data in a portable format.

To exercise any of these rights, contact us at the email below.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication tokens, and access controls. However, no system is completely secure — use a strong, unique password and keep it private.

9. Children's Privacy

CoursePrep is intended for users who are 13 years of age or older. We do not knowingly collect data from children under 13. If you believe a child has provided us personal data, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version here with an updated date. Continued use of CoursePrep after changes constitutes your acceptance of the new policy.

11. Contact

Questions or requests regarding this Privacy Policy can be sent to support@courseprep.xyz.