1. Who We Are

Adapt Edu, Inc. ("Adapt Edu," "we," "us," or "our") is a Delaware C Corporation operating an adaptive online learning platform at adaptEdu.com. We are the data controller for personal information collected through our platform.

Contact: privacy@adaptedu.com

2. Information We Collect

Information you give us directly:

• Account information: name, email address, password (hashed), and selected role (student, instructor, corporate)
• Profile information: display name, bio, avatar, and professional information you choose to share
• Course content you create or submit, including posts, discussion contributions, and assignment responses
• Payment information processed by Stripe — we never store credit card numbers directly
• Communications: messages, support tickets, and feedback you send us

Information collected automatically:

• Learning activity: which modules you open, how long you spend on each, quiz answers, completion timestamps, and performance scores
• Session data: login times, device type, browser type, and general location (country/region from IP address)
• Usage patterns: which features you use, navigation paths, and engagement with content
• Cookies and similar technologies (see Section 6)

Information from third parties:

• Google account information if you sign in via Google OAuth (email and name only)
• Payment confirmation data from Stripe (transaction ID, plan type, payment status)

3. How We Use Your Information

• Provide the service: authenticate your account, deliver courses, track progress, issue certificates
• Personalize learning: adapt course sequencing, pacing, and recommendations based on your performance data
• Communicate with you: send course completion emails, streak reminders, product updates, and support responses
• Verify credentials: enable employers to verify the authenticity of certificates you share with them
• Improve the platform: analyze aggregated, anonymized usage data to improve course content and platform features
• Legal compliance: maintain audit records required for course accreditation and respond to lawful requests
• Safety and security: detect fraud, abuse, and unauthorized access

We do not use your personal learning data for advertising targeting, and we do not sell your data to third parties under any circumstances.

4. How We Share Your Information

We share your information only in the following limited circumstances:

• With your employer (corporate accounts only): If your employer enrolled you through a corporate plan, their admin dashboard shows course completion, certificate status, and compliance training results — not quiz answers or personal communications
• Certificate verification: When you share a certificate link, the recipient can verify your name, course, completion date, and score — nothing else
• Service providers: Railway (infrastructure), Cloudflare (CDN and DNS), Stripe (payments), Resend (email) — each bound by data processing agreements
• Legal requirements: When required by law, court order, or to protect the rights and safety of users
• Business transfer: If Adapt Edu is acquired or merges, your data may transfer to the successor entity with the same privacy commitments

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of all personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion (Right to Erasure): request deletion of your account and associated personal data
• Portability: request your learning data in a machine-readable format (JSON export)
• Restriction: request that we stop processing your data in certain ways
• Objection: object to processing based on legitimate interests
• Withdraw consent: withdraw consent for optional data processing at any time

California residents (CCPA): You have the right to know what personal information is collected, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise your rights, email privacy@adaptedu.com.

EEA/UK residents (GDPR): You have all rights listed above. Our legal bases for processing are: contract performance (providing the service), legitimate interests (security and fraud prevention), and consent (optional analytics cookies). You may lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@adaptedu.com with the subject line "Privacy Request" and we will respond within 30 days.

6. Cookies & Tracking

We use the following categories of cookies and similar technologies:

• Strictly Necessary: Required for the platform to function — authentication tokens, session management, security. Cannot be disabled.
• Functional: Remember your preferences (sidebar state, dark/light mode, language). Can be disabled without losing core functionality.
• Analytics: Aggregated, anonymized data about how features are used — helps us improve the platform. No personally identifiable information. Can be disabled.
• Performance: Cloudflare performance monitoring. Can be disabled.

We do not use advertising, tracking, or third-party marketing cookies. You can manage cookie preferences at any time using the Cookie Settings button in the footer.

7. Data Retention

• Active accounts: retained for as long as your account is active
• Deleted accounts: personal data deleted within 30 days of account deletion request, except where retention is required by law
• Certificate and completion records: retained for 7 years for accreditation and audit purposes, then deleted or anonymized
• Audit logs: retained for 7 years (regulatory compliance)
• Inactive accounts: accounts inactive for 3+ years may be deleted after 90 days notice

8. Data Security

We implement industry-standard security measures including:

• TLS/HTTPS encryption for all data in transit
• Hashed and salted passwords (we never store plaintext passwords)
• JWT-based authentication with short-lived access tokens and refresh token rotation
• Infrastructure hosted on Railway and Cloudflare — both SOC 2 compliant providers
• Database access restricted to application server only — no public database exposure

No system is 100% secure. If you discover a security vulnerability, please report it responsibly to security@adaptedu.com.

9. Children's Privacy

Adapt Edu is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact privacy@adaptedu.com and we will delete it promptly.

Users between 13 and 17 may use the platform with parental consent. Our adult boutique course content is restricted to verified users 18 and older.

10. Changes to This Policy

We will notify you of material changes to this Privacy Policy via email and an in-app notice at least 14 days before the change takes effect. Continued use of the platform after that date constitutes acceptance of the updated policy.

The current version of this policy is always available at adaptEdu.com/privacy.

11. Contact Us