Back to Home

Privacy Policy

Effective Date: February 24, 2026

CourseBolt ("Platform," "we," "us," or "our") is committed to protecting the privacy of educators, instructional designers, and institutions that use our course authoring platform. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials (via Google OAuth). If you are part of an organization, we associate your account with your organization's workspace.

Course Content

You create and store course content on the Platform, including course descriptions, learning objectives, lesson content, assessment questions, unit structures, curriculum materials, and related metadata. This content is stored to provide the service and is owned by you.

Usage Information

We automatically collect information about how you interact with the Platform, including pages visited, features used, actions taken, browser type, device information, and IP address. This data helps us improve the Platform and diagnose issues.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Platform and its features
  • Authenticate your identity and manage your account
  • Process your content through AI-powered tools (e.g., assessment question generation, question type suggestions, text extraction from materials)
  • Sync your course content to integrated learning management systems (e.g., Canvas LMS) at your direction
  • Communicate with you about your account, service updates, and support requests
  • Analyze usage patterns to improve the user experience

3. AI and Large Language Model Data Handling

The Platform uses AI services (including Google Gemini) to power features such as assessment question generation, question type recommendations, and content extraction. When you use these features:

  • Relevant portions of your content (e.g., learning objectives, source material text) are sent to the AI service to generate results
  • We send only the minimum content necessary to fulfill the specific request
  • Your content is not used to train AI models. We use the Google Gemini API under terms that prohibit the use of customer data for model training
  • AI-generated outputs (e.g., questions, suggestions) are returned to you and stored as part of your course content

4. Student Data and FERPA

CourseBolt is a course design and authoring tool for educators. The Platform is not student-facing and does not directly collect student personally identifiable information (PII) or education records as defined under the Family Educational Rights and Privacy Act (FERPA).

When course content is exported or synced to a learning management system, any subsequent handling of student data occurs within that LMS and is governed by its own privacy policies and your institution's FERPA compliance practices.

5. COPPA Compliance

The Platform is designed for adult educators and instructional designers. We do not knowingly collect personal information from children under 13 years of age. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will take steps to delete such information.

6. Data Storage and Security

Your data is stored on cloud infrastructure (Supabase / AWS) with industry-standard security measures including:

  • Encryption of data in transit (TLS/HTTPS) and at rest
  • Row-level security policies ensuring users can only access their own organization's data
  • Secure authentication via OAuth 2.0 (Google)
  • Regular security updates and monitoring

While we implement reasonable safeguards, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Third-Party Services

We integrate with the following third-party services:

  • Google OAuth — for user authentication
  • Google Gemini API — for AI-powered content generation features
  • Canvas LMS — for course content synchronization (at your direction)
  • Supabase — for database and authentication infrastructure
  • Vercel — for application hosting

Each third-party service has its own privacy policy. We encourage you to review their policies. We share only the data necessary for each integration to function.

8. Data Retention and Deletion

We retain your account information and course content for as long as your account is active. If you delete your account:

  • Your course content and personal information will be deleted within 30 days
  • Anonymized, aggregated usage data may be retained for analytics purposes
  • Backups containing your data will be purged according to our backup rotation schedule (typically within 90 days)

You may request export of your data before account deletion.

9. Cookies and Tracking

We use essential cookies to maintain your authentication session and provide core Platform functionality. We do not use third-party advertising cookies or cross-site tracking technologies. Analytics data is collected in aggregate to understand usage patterns and improve the service.

10. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete personal information
  • Delete your account and associated personal data
  • Export your course content in standard formats
  • Withdraw consent for optional data processing activities

To exercise any of these rights, contact us at the address below.

11. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the effective date. Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

CourseBolt
Email: privacy@coursebolt.app