Privacy Policy
How we collect, use, and protect your personal information
Last Updated: January 11, 2025
We take your privacy seriously. This Privacy Policy explains how Caring CourseForge, operated by Caring Consulting Co. LLC ("we," "us," or "our"), collects, uses, shares, and protects your personal information when you use our service. By using Caring CourseForge, you agree to the practices described in this policy.
1. Information We Collect
1.1 Information You Provide
We collect information that you voluntarily provide when you:
- Create an account: Email address, password, display name, and optional profile photo
- Use our services: Course content, lesson materials, quizzes, user-generated content, and preferences
- Subscribe to paid plans: Billing information (processed securely by Stripe), payment history, and subscription details
- Contact us: Name, email address, and message content when you reach out for support
1.2 Information Collected Automatically
When you use our service, we automatically collect:
- Authentication data: Login timestamps, authentication tokens, and session information via Firebase Authentication
- Usage data: Course interactions, feature usage, time spent on platform, and user preferences
- Device information: Browser type, operating system, device identifiers, and IP address
- Technical data: Error logs, performance metrics, and diagnostic information
1.3 AI-Generated Content
When you use our AI-powered features, we process your prompts and course content through third-party AI services (Anthropic Claude and Google Gemini) to generate course materials. This content is used solely to provide the requested service and is not used to train AI models.
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain our service: Enable account access, save your courses, and deliver core functionality
- Process payments: Handle subscription billing, refunds, and payment history through Stripe
- Improve our service: Analyze usage patterns, fix bugs, and develop new features
- Communicate with you: Send service updates, respond to support requests, and deliver important notifications
- Ensure security: Detect and prevent fraud, abuse, and unauthorized access
- Comply with legal obligations: Meet regulatory requirements and respond to legal requests
- AI-powered features: Generate course content, quizzes, and learning materials based on your input
3. How We Share Your Information
We do not sell your personal information. We share your data only in these circumstances:
3.1 Service Providers
We share information with trusted third-party services that help us operate:
- Firebase (Google): Authentication, database, and cloud storage services
- Stripe: Payment processing and subscription management (subject to Stripe's Privacy Policy)
- Anthropic: AI-powered content generation via Claude API (subject to Anthropic's Privacy Policy)
- Google AI: AI-powered content generation via Gemini API (subject to Google's Privacy Policy)
- Stripe Climate: 1% of revenue contribution data for climate impact transparency
3.2 Legal Requirements
We may disclose your information if required to:
- Comply with applicable laws, regulations, or legal processes
- Respond to valid government or law enforcement requests
- Protect our rights, property, or safety, or that of our users
- Prevent fraud, security issues, or technical problems
3.3 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your personal information becomes subject to a different privacy policy.
4. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: All data transmitted to and from our service is encrypted using TLS/SSL protocols
- Firebase Security: Authentication and data storage through Google's secure Firebase infrastructure
- Secure payment processing: Payment information is handled exclusively by Stripe and never stored on our servers
- Access controls: Strict internal access policies and role-based permissions
- Regular security audits: Ongoing monitoring and testing for vulnerabilities
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to improve our security practices.
5. Data Retention
We retain your information for as long as necessary to provide our services:
- Account data: Retained while your account is active and for 90 days after account deletion to allow for account recovery
- Course content: Retained while your account is active or until you delete specific courses
- Payment records: Retained for 7 years to comply with tax and accounting regulations
- Usage logs: Retained for up to 2 years for security and service improvement purposes
- Support communications: Retained for 3 years to maintain service quality and training records
6. Your Rights and Choices
6.1 Data Access and Control
You have the right to:
- Access your data: View and download your personal information and course content from your account settings
- Update your information: Modify your profile, email address, and preferences at any time
- Delete your account: Permanently delete your account and associated data (subject to legal retention requirements)
- Export your content: Download your courses in SCORM or web package formats
- Opt-out of communications: Manage notification preferences in your account settings
6.2 GDPR Rights (EU Users)
If you are in the European Economic Area, you have additional rights:
- Right to data portability
- Right to restriction of processing
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
6.3 CCPA Rights (California Users)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose
- Request deletion of your personal information
- Opt-out of the sale of personal information (note: we do not sell your data)
- Non-discrimination for exercising your privacy rights
To exercise these rights, please contact us at support@caringconsulting.co. We will respond to your request within 30 days.
7. Children's Privacy
Caring CourseForge is not intended for children under 13 years of age (or under 16 in the EU). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will delete it promptly.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We rely on Firebase (Google Cloud) infrastructure, which uses data centers globally. These transfers are protected by:
- Standard contractual clauses approved by the European Commission
- Google's EU-US Data Privacy Framework certification
- Appropriate technical and organizational security measures
9. Cookies and Tracking Technologies
We use essential cookies and similar technologies to:
- Authentication cookies: Keep you logged in and maintain your session
- Preference cookies: Remember your settings and preferences
- Security cookies: Detect and prevent fraudulent activity
We do not use third-party advertising or tracking cookies. Essential cookies are necessary for the service to function and cannot be disabled. You can control non-essential cookies through your browser settings.
10. Third-Party Links
Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
11. Climate Commitment Transparency
As part of our commitment to climate action, we contribute 1% of all revenue to Stripe Climate. Transaction-level data necessary to calculate and verify this contribution is shared with Stripe Climate for transparency reporting. This data is aggregated and does not include personally identifiable information.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by:
- Updating the "Last Updated" date at the top of this policy
- Sending an email notification to your registered email address
- Displaying a prominent notice on our service
Your continued use of Caring CourseForge after changes become effective constitutes acceptance of the updated policy. We recommend reviewing this policy periodically.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:
Email: support@caringconsulting.co
Data Protection Inquiries: support@caringconsulting.co
Operated by: Caring Consulting Co. LLC
Service: Caring CourseForge
Response Time: We aim to respond to all privacy inquiries within 30 days
For general support questions, please visit our Support Center.
Summary: Legal Basis for Processing (GDPR)
We process your personal data based on:
- Contract: To provide the service you signed up for
- Legitimate interests: To improve our service and prevent fraud
- Consent: For optional features and communications (where applicable)
- Legal obligation: To comply with applicable laws and regulations
This Privacy Policy is designed to comply with GDPR, CCPA, and other applicable privacy regulations. By using Caring CourseForge, you acknowledge that you have read and understood this Privacy Policy.