CornerstoneTemplate notice: this page is a general-purpose privacy policy template based on common practices for subscription web apps. It is not legal advice and does not by itself make you compliant with laws like the GDPR or CCPA. Replace the bracketed placeholders with your actual business details and have a qualified attorney review this document before you rely on it.
1. Overview
This Privacy Policy explains how [Company Legal Name] ("Cornerstone," "we," "us," or "our") collects, uses, shares, and protects information when you use the Cornerstone Learning Platform (the "Service"). By using the Service, you agree to the collection and use of information as described here.
2. Information We Collect
We collect the following categories of information:
- Account information: the email address and password you provide when you sign up. Passwords are stored in hashed form by our authentication provider and are never visible to us in plain text.
- Usage data: course and learning-path progress, completed lessons, login timestamps, and similar activity within the Service.
- Payment information: if you subscribe to a paid plan, billing details are collected and processed directly by our third-party payment processor. We do not store full card numbers.
- Technical data: IP address, browser type, device information, and log data collected automatically when you use the Service.
- Communications: messages you send us, such as support requests.
3. How We Use Your Information
- To create and maintain your account and authenticate you when you sign in;
- To provide, operate, and improve the Service, including tracking your course progress;
- To process subscription payments and manage billing;
- To communicate with you about your account, updates, or support requests;
- To detect, prevent, and address technical issues, fraud, or abuse; and
- To comply with legal obligations.
4. Cookies & Similar Technologies
We use cookies and similar technologies to keep you signed in and to understand how the Service is used. See our Cookie Notice for details on the cookies we use and how to manage them.
5. How We Share Information
We do not sell your personal information. We share information only with:
- Service providers who help us operate the Service, including our authentication and database provider (Supabase) and our payment processor;
- Legal authorities when required by law, court order, or to protect the rights, safety, or property of Cornerstone, our users, or others; and
- A successor entity in the event of a merger, acquisition, or sale of assets, subject to this Policy or a substantially similar one.
6. Data Retention
We retain your account and usage information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time (see Section 7).
7. Your Rights & Choices
Depending on where you live, you may have the right to:
- Access, correct, or delete the personal information we hold about you;
- Object to or restrict certain processing of your information;
- Request a copy of your data in a portable format; and
- Withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at [Contact Email]. We will respond within the timeframe required by applicable law.
8. Data Security
We use reasonable technical and organizational measures, including encryption in transit and access controls provided by our infrastructure providers, to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Children's Privacy
The Service is not directed to children under 13 (or the applicable minimum age in your jurisdiction), and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us and we will delete it.
10. International Data Transfers
Your information may be processed and stored in countries other than your own, including countries that may have different data protection laws. Where required, we rely on appropriate safeguards for such transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect.
12. Contact Us
Questions about this Privacy Policy or your data? Contact us at [Contact Email].