Privacy Policy
Last updated: October 6, 2026
1. Who we are
Course Parse is run by Mustafa Rasheed, trading as Course Parse ("we", "us", "our"), and is the controller of your personal data for the Service at www.courseparse.com, which covers both the study tool and the AI courses. Contact us for anything in this policy at support@courseparse.com. If you use Course Parse on behalf of an organisation and put other people's data into it, see our Data Processing Addendum.
2. What we collect
- Account information — your name and email address, and a password (which our sign-in provider stores only in hashed form and we never see). If you sign in with Google we receive your name, email address and profile picture from Google. We also record when you accepted these terms and which version.
- Uploaded documents and what we make from them — the files you upload, the text we extract from them, and the study packs, notes, flashcards, quizzes and study plans generated from them, plus your flashcard review history and quiz attempts.
- Tutor chat — the questions you ask the AI tutor and its answers.
- Speaking practice — the recording you make is sent to our AI provider to be turned into text and is not stored by us. We do not keep the audio, the transcript or the feedback after the request ends.
- Course data — if you take our AI courses: the name and email you give to unlock a free course, whether you ticked the box to receive updates, your progress and quiz scores, the name you ask to appear on a certificate, and any build project or capstone you submit for review. Free lessons use a signed cookie so the course remembers where you are.
- Billing records — your plan, its status, and the identifiers Paddle gives us for your customer record, subscription and purchases. Card and billing details go to Paddle directly. We never see or store your card number.
- Usage data — how many AI requests your account makes and what they cost us, used to apply plan limits and spot abuse.
- Where you came from — only if you accept cookies: the page you first landed on, the website or campaign that sent you (including any
utm_tags in the link), recorded when you create an account. - Technical data — your IP address, browser type and the pages requested, which our hosting provider logs and our systems use briefly for security and rate limiting. Crash reports go to our error monitoring service, where we have not switched on its collection of personal data.
- If you delete your account — an optional reason for leaving, if you give one.
We do not knowingly collect special categories of data (health, religion, and so on). Please do not put any in documents you upload.
3. How we use it, and why we are allowed to
- To provide the Service you asked for — creating your account, generating study materials, running courses, issuing certificates, managing your subscription, answering support requests. Legal basis: performing our contract with you.
- To keep the Service safe and working — preventing abuse, enforcing limits, fixing errors, counting costs. Legal basis: our legitimate interest in running a secure service.
- Service and reminder emails — account and purchase notices, and flashcard and study-plan reminders. Reminders carry an unsubscribe link; account and purchase notices are part of the contract and cannot be switched off while you have an account.
- Marketing emails — only if you ticked the box to receive updates. Every one carries an unsubscribe link. Legal basis: your consent, which you can withdraw at any time.
- Analytics and advertising measurement — only if you press Accept on the cookie banner (see section 9). Legal basis: your consent.
- Legal obligations — keeping records we must keep, and responding to lawful requests.
We do not sell your personal data.
4. AI, and your content
To make study materials we send text extracted from your documents, and your chat messages, to our AI providers (listed on our sub-processor page). For scanned PDFs with no readable text, the pages are sent to an OCR provider. We send this only to produce your result, and each provider's own terms and privacy policy govern what it does with the data it receives.
We do not use your uploaded documents, chats or generated materials to train AI models, ours or anyone else's, and we do not supply them to anyone for that purpose. If that ever changed we would ask for your explicit, separate consent first, and the Service would work exactly the same if you said no.
AI output can be wrong. Please check anything important against your source material.
5. Who we share it with
Only the providers on our sub-processor page, each for the purpose stated there, and the other parties below:
- Paddle is our Merchant of Record: it takes your payment, charges tax and issues invoices, and is a separate controller of that information under its own privacy policy.
- Your instructor or organisation, if you joined a class or organisation on Course Parse: they can see what the Service shows them about your participation, for example the packs shared with the class.
- Authorities and advisers where the law requires, to protect our rights, or in a sale of the business, with the same protection for your data.
6. Where your data goes
Our database and file storage are in India, our application servers are in the United States, and several providers process data in the United States and the European Union. Where the law requires a safeguard for sending data out of your country, we use the transfer mechanism each provider offers, such as the European Commission's Standard Contractual Clauses, where the provider offers them.
7. How long we keep it
We keep your account data, documents and generated study packs for as long as your account is active. When you delete your account, we delete them from our live systems immediately, including your uploaded files and, for any course mailing-list entries under your email address, those too. Copies in any provider backups are outside our direct control and expire on the provider's own schedule.
When you delete an account, we keep two small records that do not contain your name or email address. The first is a one-way code made from your email address, with the number of free study packs you used that month. It exists only so that deleting an account and signing up again with the same email does not reset the monthly free limit, and it stops counting once that month is over. The second is your reason for leaving, if you choose to give one. Paddle keeps its own payment and tax records for as long as the law requires.
If you only join a free course mailing list, we keep that entry until you unsubscribe or ask us to delete it.
8. Your rights
Depending on where you live (including under the EU and UK GDPR, the California Consumer Privacy Act and Saudi Arabia's Personal Data Protection Law), you can:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data
- Receive your data in a portable format
- Object to, or ask us to restrict, some uses of it
- Withdraw consent at any time, without affecting what happened before
- Complain to your data protection authority
Two of these you can do yourself, instantly, in Settings: Download my data gives you a file with everything we hold about your account, and Delete account permanently removes it. For anything else, email support@courseparse.com. We answer within one month, and we will not treat you differently for using a right.
We do not sell personal data. The advertising tools in section 9 share data with advertising platforms only if you accept them, and Reject all keeps them switched off.
10. Security
We use encrypted connections (HTTPS), access controls, database rules that stop one account reading another's data, and rate limiting on sensitive actions. No method of transmission or storage is 100% secure, and we do not hold a SOC 2 report or ISO 27001 certificate. If a breach affects you, we will tell you and the authorities as the law requires.
11. Children
A Course Parse account is for people aged 13 and over, and we do not knowingly collect personal information from children under 13 through an account of their own. We do not run the Meta or OpenAI advertising pixels on our children's course pages. If you believe a child has given us personal information, contact us and we will delete it promptly.
Pebble Math at /math is used by children under a parent or guardian's account. The parent signs in; a child never needs an email address. We store up to eight learner nicknames, avatar and theme choices, and answer and progress history in that parent's account, in the same database as the rest of the account. It is used only to run the app and show the parent progress. It carries no advertising or analytics scripts, is included in your data export, and is deleted when you delete the account. If you switch on the weekly progress email in the parent dashboard, we email your account address a summary of the previous seven days of practice, using only that saved progress. It is off unless you turn it on, and every email has an unsubscribe link.
12. Changes to this policy
We will update this page when what we do changes, with a new date at the top. For changes that matter we will email you or show a notice in the Service.
13. Contact
Questions, requests or complaints: support@courseparse.com.