CourseFlipHelp Center →

Legal

Privacy Policy

Last updated: May 22, 2026

1. Introduction

CourseFlip ("we", "us", "our") is operated by Anthria and is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information when you use our platform at courseflip.io.

By using CourseFlip, you agree to the collection and use of information as described in this policy. If you have any concerns, please contact us before using the Platform.

2. Data We Collect

We collect the following categories of personal information:

  • Account data: your name, email address, and hashed password when you register.
  • Profile and store data: your store name, bio, logo, custom domain, and branding preferences.
  • Payment information: billing details processed by our payment partners (Paddle). We do not store full card numbers on our servers.
  • Course and content data: courses you activate, create, or upload through the Platform.
  • Student data: email addresses of students who purchase courses through your storefront.
  • Usage data: login times, pages visited, feature usage, device type, and IP address for security and analytics.
  • Communication data: emails you send us and support conversations.

We do not collect sensitive personal information such as government IDs, financial account numbers, or biometric data.

3. How We Use Your Data

We use your personal information for the following purposes:

  • Account management: creating and maintaining your seller account and storefront.
  • Service delivery: providing course hosting, student access, analytics, and platform features.
  • Transactional emails: sending purchase confirmations, trial expiration reminders, and important account notifications via our email provider (Resend).
  • Payment processing: billing your subscription and facilitating your payment account setup.
  • Security: detecting fraud, abuse, and unauthorized access.
  • Platform improvement: aggregated, anonymized analytics to understand how features are used and improve the product.
  • Legal compliance: retaining records required by law.

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

4. Third-Party Services

To operate CourseFlip, we share data with the following trusted third-party services. Each provider is subject to its own privacy policy:

Paddle

Subscription billing and payment processing

Privacy Policy →

PayPal

Optional seller payment collection

Privacy Policy →

Resend

Transactional email delivery

Privacy Policy →

Cloudflare R2

File and video storage

Privacy Policy →

MongoDB Atlas

Database hosting (data encrypted at rest)

Privacy Policy →

We only share the minimum data necessary for each provider to perform their function. We do not share your data with advertising networks or data brokers.

5. Cookies

CourseFlip uses cookies solely for authentication and session management. When you log in, a secure, HTTP-only session cookie is set by NextAuth to maintain your logged-in state.

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies. You can clear your browser cookies at any time; this will log you out of your account.

6. Data Retention

  • Account data is retained for as long as your account is active, and up to 30 days after deletion to allow for recovery requests.
  • Transaction records (subscription payments, student purchases) are retained for 7 years to comply with financial and legal obligations.
  • Course content you upload is deleted within 30 days of account termination.
  • Email logs are retained for 90 days for deliverability troubleshooting.

7. Your Rights

You have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you.
  • Correction: request that we correct inaccurate information.
  • Deletion: delete your account and associated data via Dashboard → Settings → Delete Account. Note that transaction records required by law cannot be deleted.
  • Data export: export your student list and course data from your dashboard.
  • Objection: object to certain uses of your data by contacting us.

To exercise any right not available in your dashboard, contact us at privacy@courseflip.io. We will respond within 30 days.

8. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), HTTP-only secure cookies, and access controls. However, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on the Platform. Continued use of CourseFlip after the updated policy takes effect constitutes your acceptance of the changes.

10. Contact

For any privacy-related questions, concerns, or requests, contact us at privacy@courseflip.io.

Terms of ServiceHelp Center← Back to CourseFlip