LEGAL

Privacy Policy

Last updated: September 11, 2026 · Draft — pending legal review

Information we collect

Account details (name, email, password hash); profile and credential information tutors submit for verification; usage data (courses viewed, workspace activity, AI tutor conversations); payment and payout details processed by our payment providers; device and log data (IP address, browser, approximate location).

How we use it

To operate the Platform (deliver courses, run the AI tutor, process enrollments and payouts); to personalize recommendations and mastery tracking; to detect fraud, abuse, and policy violations in course moderation; to communicate service updates and, where you've opted in, marketing.

Sharing & disclosure

We share data with: payment processors to complete transactions and tutor payouts; cloud infrastructure and AI model providers who process content on our behalf under contract; law enforcement when legally required. We do not sell personal data to third parties.

Bot protection (Cloudflare Turnstile)

Sign-up, sign-in, and password-reset forms are protected by Cloudflare Turnstile, which processes real client signals (e.g. IP address and browser/device information) to verify you’re not a bot before those requests reach our servers. This processing is governed by Cloudflare’s own Turnstile Privacy Addendum, supplemental to Cloudflare’s main Privacy Policy.

Essence Credits & payments data

Credit balances, treasury history, and payout records are tied to your account and retained for accounting, tax, and dispute-resolution purposes, consistent with the payment gateway terms.

Data retention

We retain account and transaction data for as long as your account is active and as needed to meet legal, tax, and accounting obligations. You may request deletion subject to those obligations.

Your rights & choices

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Contact us to exercise these rights.

Security

We use industry-standard safeguards (encryption in transit, access controls, monitoring). No system is completely secure; see our Security page for more detail.

Children's privacy

The Platform is not directed to children under 13, and we do not knowingly collect their data.

Changes to this policy

We'll post material changes here and update the "Last updated" date above.

Contact us

Questions about this policy: privacy@stackgrasp.example (placeholder — confirm real contact before publishing).