Privacy Policy

Last updated: September 3, 2026

This Privacy Policy explains what information Courshway collects, how we use it, and the choices you have. Courshway is a product of Viral Marketing Solutions Co. (South Carolina, USA).

1. Scope

This policy applies to information we process when you visit our website, create an account, or use Courshway as a Creator or a Student. It does not cover the practices of third parties we do not control, including Creators' own handling of their Students' information outside Courshway.

2. Information we collect

2.1 Information you provide

• Account information — such as your name and email address, collected when you sign up (authentication is handled through Google Firebase).
• Creator content — the courses, videos, text, and other materials Creators upload.
• Payment information — when you subscribe or purchase a course, payment details are collected and processed by Stripe. We do not store full payment card numbers ourselves; we receive limited information such as transaction records and subscription status.
• Communications — messages you send us, such as support requests.

2.2 Information collected automatically

• Usage data — such as course progress, activity within the platform, and basic log information (for example, device and browser data) used to operate and improve the service.
• Email engagement — for our own emails, we may process delivery and engagement events (such as whether an email was delivered or opened) through our email provider.

2.3 Cookies and advertising technologies

We use a small number of first-party technologies to operate the site, and one advertising technology described below.

• Essential and first-party — we keep a limited record in your browser's local storage so we can remember how you reached us (for example, a referral link) and count page views. This is first-party, sets no cookies, and does not identify you.
• Google Ads conversion measurement — on our public marketing pages and within the app, we load Google’s advertising tag. It sets cookies and processes online identifiers so that, if you arrived from one of our ads, we can tell that the visit led to a subscription. We use it to measure and improve our advertising, not to build profiles about you.
• Hashed email at subscription — when you start a subscription, the same Google tag sends a hashed (irreversible, one-way scrambled) version of your email address so Google can recognise that the subscription came from an ad it showed you, even if the cookie above was lost along the way. The hashing happens in your browser: your actual email address is never sent to Google by us. This is used only to match a subscription to an ad click.

How to opt out. If your browser or a browser extension sends a Global Privacy Control (GPC) signal, we do not load the advertising tag at all and no advertising cookies are set — you do not need to do anything else. You can also block or clear cookies in your browser settings, or contact us at hello@courshway.com and we will treat it as an opt-out request.

3. How we use information

We use information to:

• provide, operate, and maintain Courshway, including hosting and streaming course videos and generating transcripts;
• authenticate accounts and process subscriptions and course payments;
• power platform features, including AI-assisted tools and the AI Course Assistant;
• send transactional messages (such as receipts, enrollment confirmations, and account notices);
• send marketing messages where permitted, which you can opt out of at any time;
• monitor, secure, troubleshoot, and improve the service; and
• comply with legal obligations and enforce our Terms.

4. Creators & Students

When a Student enrolls in a Creator's course, the Creator can see information related to that enrollment, such as the Student's name, email, and course progress, so they can deliver and support their course. Creators act as independent parties responsible for how they use their Students' information. When a Student interacts with a Creator's AI Course Assistant, those questions are processed to generate answers based on that course's content.

5. How we share information

We do not sell your personal information. We share information only:

• with service providers who process it on our behalf to run the platform (see the next section);
• between Creators and their Students as needed to deliver courses, as described above;
• with tools a Creator connects to their own account, at that Creator's direction (see “Creator integrations” below);
• with Google, through its advertising tag, to measure the effectiveness of our own advertising, as described in “Cookies and advertising technologies” above and in the California section below;
• to comply with the law, respond to lawful requests, or protect the rights, safety, and property of Courshway, our users, or others; and
• in connection with a business transfer, such as a merger or acquisition, subject to this policy.

6. Service providers we use

We rely on the following key providers to operate Courshway. Each processes only the information needed for its function:

These providers may process information in the United States or other countries. We may update this list as our providers change; the categories of processing described above are what we commit to, and the table reflects our providers as of the date shown at the top of this page.

7. Creator integrations & the Courshway API

Creators on the Pro plan can create API keys that let outside tools — for example Zapier, Make, or software they build themselves — read information about their own courses and enrollments, and enroll Students in their own courses. This is how a Creator connects Courshway to the tools they already use, such as a mailing list or a spreadsheet.

What this means in practice:

• What can be accessed. A key can read the Creator's own courses and enrollments, including each Student's name, email address, enrollment status, payment amount, and course progress. A key cannot access any other Creator's courses or Students.
• Who controls it. The Creator chooses which tools to connect and what those tools do with the information. Those tools are not our service providers — we have no relationship with them, and this policy does not cover their practices. The Creator is responsible for handling their Students' information lawfully once it leaves Courshway.
• Keys are revocable. A Creator can revoke a key at any time from their account settings, which immediately stops any tool using it. We store keys in hashed form and cannot recover or display a key after it has been created.
• Enrollments created through the API. A Creator can grant a person access to their course without a payment through Courshway — for example, someone who bought elsewhere. If that person has no Courshway account, we create one using the email address the Creator provides and email them a link to set a password. They can delete their account at any time as described in “Your rights & choices”.
• What we do with API activity. We log requests to operate, secure, and rate-limit the API. We do not use information accessed through a Creator's key for our own purposes.

8. Email & communications

We send two kinds of email. Transactional emails — such as receipts, enrollment confirmations, account and security notices, and billing messages — are part of the service and are not marketing; you cannot unsubscribe from these while you have an account. Marketing emails — such as tips, product news, and promotions — are optional, and every marketing email includes an unsubscribe link. We honor unsubscribe requests for marketing email.

9. Data retention

We keep personal information for as long as your account is active or as needed to provide the service, and afterward as needed to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete content or close your account, we delete or de-identify associated personal information within a reasonable period, except where retention is required or where content has already been purchased by Students. Backups may persist for a limited time.

10. Security

We take reasonable measures to protect personal information, and we rely on established providers (such as Firebase and Stripe) for core security functions. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

11. Your rights & choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You can update much of your account information directly in your settings, opt out of marketing email at any time, and contact us to make a rights request. We will respond consistently with applicable law. We will not discriminate against you for exercising these rights.

12. Children's privacy

Courshway is not directed to children under 13, and Creator accounts require you to be at least 18 (or the age of majority where you live). We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will take appropriate steps.

13. International users

Courshway is operated from the United States, and information we process may be stored and processed in the United States or other countries where we or our providers operate. By using Courshway, you understand that your information may be transferred to and processed in the United States.

14. Additional information for EEA/UK users (GDPR)

If you are in the European Economic Area or the United Kingdom, the following applies to you.

14.1 Data controller

The controller of your personal information is Viral Marketing Solutions Co., which operates Courshway. You can reach us at hello@courshway.com.

14.2 Legal bases for processing

We process your personal information only where we have a legal basis under the GDPR:

• Performance of a contract — to provide the service, including hosting your courses, processing subscriptions, and enabling course sales.
• Legitimate interests — to operate, secure, troubleshoot, and improve Courshway, and to send service-related and (where permitted) marketing communications, where not overridden by your rights.
• Consent — where we ask for it (such as certain marketing); you may withdraw it at any time without affecting processing already carried out.
• Legal obligation — to comply with applicable laws, such as tax and accounting requirements related to payments.

14.3 Your rights

Subject to conditions in the law, you have the right to access, rectify, erase, restrict, or object to our processing of your personal information, and the right to data portability. Where processing is based on consent, you may withdraw it at any time. You also have the right to lodge a complaint with your local data protection supervisory authority. To exercise your rights, contact us at hello@courshway.com; we will respond within the timeframes the law requires.

14.4 International transfers

We are based in the United States, and processing your information involves transferring it to the United States and to our providers. Where required, we rely on appropriate safeguards for such transfers, such as the European Commission's Standard Contractual Clauses.

14.5 Automated decision-making

We do not use your personal information to make decisions producing legal or similarly significant effects about you through solely automated means. Our AI features assist with content and answer course questions; they do not make such decisions about you.

15. Additional information for California residents (CCPA)

This section applies to California residents and describes rights under the California Consumer Privacy Act, as amended. It applies to the extent the law applies to us.

15.1 Categories of information we collect

In the past 12 months, we have collected the following categories of personal information: identifiers (such as name and email); account and commercial information (such as subscription and purchase records); internet or other electronic activity (such as usage and course-progress data); and the content you provide (such as courses and messages). We collect this information from you and automatically through your use of the service, and use it for the purposes described in this policy.

15.2 Sale and sharing of personal information

We do not sell your personal information for money, and we never have.

We do use Google’s advertising tag on our website to measure whether our own ads lead to subscriptions. That tag sets cookies and discloses online identifiers to Google. Under California law this may be treated as sharing personal information for cross-context behavioral advertising, so we tell you about it plainly rather than relying on a narrow reading.

To opt out of this sharing, you can do either of the following:

• Use Global Privacy Control. If your browser or a browser extension sends a GPC signal, we do not load the advertising tag at all: no advertising cookies are set and no hashed email address is sent. We honor this automatically — there is nothing else for you to do, and no account is required.
• Contact us at hello@courshway.com with the subject “Do Not Sell or Share” and we will action it.

The information involved is limited to online identifiers set by the advertising cookie and, when you subscribe, a hashed version of your email address. We do not share personal information for cross-context behavioral advertising in any other way, we do not send your unhashed email address to an advertising company, and we do not use any of it to build profiles about you.

15.3 Your California rights

Subject to the law, you have the right to know what personal information we have collected and how we use and disclose it; to request deletion of your personal information; to correct inaccurate personal information; and to limit the use of sensitive personal information (note that we do not use sensitive personal information for purposes that would trigger this right). We will not discriminate against you for exercising these rights. To make a request, contact us at hello@courshway.com. We will verify your request as required by law before responding.

16. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, notify you. Your continued use of Courshway after changes take effect means you accept the updated policy.

17. Contact

For privacy questions or requests, contact us at hello@courshway.com.