OpenCourses.AI Privacy Policy
Updated: May 28, 2026 Version: privacy_v0.1 Contact: [email protected]
Draft for legal review. This document is intended as the first operational
version of the OpenCourses.AI Privacy Policy. It should be reviewed by legal
counsel before formal launch, institutional partnerships, paid services, or
large-scale international use.
Overview
OpenCourses.AI is an open online learning platform that provides course discovery, learner accounts, course enrollment, learning units, notebook-based courses, quizzes, progress tracking, course ratings, course interest signals, completion evidence, certificate-like records, verification pages, and administrative tools.
OpenCourses.AI may also support AI-assisted and adaptive learning features connected to ALI, Adaptive Learning Intelligence, including learner profiles, recommendations, learning-path personalization, and future adaptive course experiences.
This Privacy Policy explains how OpenCourses.AI collects, uses, discloses, stores, and protects personal information when you access or use OpenCourses.AI and related services (collectively, the "Services").
This Privacy Policy is separate from the OpenCourses.AI Terms of Service. You should review both documents before using the Services.
Contact for Privacy Questions
If you have questions about OpenCourses.AI privacy practices or want to submit a privacy request, contact us at [email protected].
Scope
This Privacy Policy applies to:
- the OpenCourses.AI website;
- learner accounts;
- Google sign-in and email/password sign-in;
- onboarding and learner profiles;
- course catalog pages;
- course enrollment;
- learning units;
- notebooks rendered or linked through the platform;
- quizzes and assessment attempts;
- course progress;
- ratings and interest signals;
- completion evidence and verification pages;
- contact forms;
- administrative tools;
- course import and publishing tools;
- AI-assisted recommendations or adaptive learning features;
- related operational, security, and support activities.
Some future Services, institutional programs, APIs, integrations, or enterprise offerings may require additional privacy notices. If additional notices apply, they will supplement this Privacy Policy.
Personal Information We Collect
OpenCourses.AI may collect the categories of information described below.
Account Information
We may collect:
- first name;
- last name;
- display name;
- email address;
- password hash if you register with email/password;
- Google account identifier if you use Google sign-in;
- profile image if provided by an authentication provider;
- account role, such as learner or administrator;
- account creation date;
- sign-in dates;
- recent navigation timestamps and last visited platform path for operational
administration;
- account status;
- accepted Terms and Privacy Policy versions.
Learning Profile Information
We may collect information you provide during onboarding or account setup, including:
- primary learning goal;
- topics, skills, or interests;
- current level;
- weekly availability;
- preferred learning pace;
- preferred learning formats;
- learning objectives;
- onboarding completion status.
Course Activity
We may collect:
- course enrollments;
- courses marked as "interested";
- units viewed or completed;
- quiz attempts;
- quiz answers and scores;
- course completion status;
- course ratings;
- completion evidence;
- certificate or evidence codes;
- verification page activity;
- timestamps related to learning activity.
Recent Activity and Presence Signals
OpenCourses.AI may record lightweight recent-activity signals such as the last authenticated navigation time, the last internal path visited, a shortened browser user-agent, and a hashed IP-derived value. These signals are used for platform administration, security, support, and understanding whether the learning environment is being actively used. They are not intended to provide precise real-time presence and should not be interpreted as an exact online status.
User-Submitted Content
If you create, import, upload, submit, or publish content, we may process:
- course packages;
- course metadata;
- notebooks;
- PDFs;
- images;
- audio;
- code;
- datasets;
- model files;
- quizzes;
- prompts;
- comments or messages;
- contact form submissions;
- support requests;
- administrative notes where applicable.
Technical and Security Information
We may collect:
- IP address;
- browser type;
- device information;
- operating system;
- user-agent;
- approximate location derived from technical data where applicable;
- session cookies;
- authentication tokens;
- language preference;
- logs;
- error reports;
- security events;
- fraud, spam, or abuse signals.
Communications
If you contact OpenCourses.AI, we may collect:
- your name;
- email address;
- message content;
- attachments you provide;
- support history;
- administrative response records.
How We Collect Information
We collect information:
- directly from you when you create an account, complete onboarding, enroll in a
course, submit a quiz, rate a course, mark interest, publish content, or contact us;
- automatically when you use the Services;
- from Google or another authentication provider when you choose to sign in using
that provider;
- from administrators or institutions if they manage courses, users, or learning
activity through OpenCourses.AI;
- from course packages or content that you or others import into the platform.
How We Use Information
OpenCourses.AI may use personal information to:
- create and manage accounts;
- authenticate users;
- provide access to courses;
- save learning progress;
- process quiz attempts;
- show learning history;
- issue completion evidence;
- verify completion evidence;
- display learner dashboards;
- recommend courses;
- personalize learning experiences;
- prepare future adaptive learning features under ALI;
- process course interest and ratings;
- support course import and publishing;
- operate administrative tools;
- respond to support requests;
- send service-related communications;
- prevent abuse, fraud, spam, copyright violations, and security incidents;
- diagnose errors;
- improve the Services;
- comply with legal obligations;
- enforce the Terms of Service and content policies.
Legal Bases and Authorization
Depending on applicable law, OpenCourses.AI may process personal information based on:
- your consent;
- the need to provide the Services you requested;
- legitimate operational, educational, security, and platform improvement
interests;
- compliance with legal obligations;
- protection of rights, users, and the Services.
For users in Colombia, OpenCourses.AI should obtain prior, express, and informed authorization for personal data processing where required by Law 1581 of 2012 and related rules.
For users in jurisdictions with GDPR-style rules, OpenCourses.AI should provide clear information about purposes, categories of data, retention, recipients, international transfers, user rights, and any automated decision-making that may have legal or similarly significant effects.
Google Sign-In
If you sign in with Google, OpenCourses.AI may receive information such as your name, email address, profile image, and a Google account identifier, depending on the scopes approved.
OpenCourses.AI uses Google sign-in to authenticate your account and operate the Services. OpenCourses.AI should request only the minimum Google permissions needed for the relevant feature.
If OpenCourses.AI changes how it uses Google user data or requests additional Google API scopes, it should update this Privacy Policy and obtain any required user consent before using that data for a new purpose.
ALI and Adaptive Learning Signals
OpenCourses.AI is connected to ALI, Adaptive Learning Intelligence. ALI is intended to support more personalized and adaptive learning experiences.
OpenCourses.AI may use learning profile data, course activity, interests, quiz performance, progress, ratings, and completion evidence to improve recommendations and prepare adaptive learning features.
OpenCourses.AI should not use these signals to make high-stakes automated decisions without appropriate notice, safeguards, and human review where required.
Completion Evidence and Public Verification
OpenCourses.AI may generate completion evidence, certificate-like records, downloadable documents, verification codes, or public verification pages.
If you share a verification link or code, third parties may be able to see limited information such as:
- your name;
- course title;
- completion date;
- completion or approval status;
- quiz average or completion metrics where shown;
- evidence code.
OpenCourses.AI should avoid exposing unnecessary account information on public verification pages.
Cookies and Similar Technologies
OpenCourses.AI may use cookies, local storage, or similar technologies to:
- keep users signed in;
- remember language preferences;
- secure sessions;
- prevent abuse;
- diagnose errors;
- support analytics or service improvement where enabled.
You can control cookies through your browser settings, but disabling cookies may prevent parts of the Services from working.
If OpenCourses.AI later adds advertising cookies, cross-site tracking, or advanced analytics, this Privacy Policy and any cookie disclosures should be updated before those features are enabled.
How We Share Information
OpenCourses.AI may share personal information with:
- hosting and infrastructure providers;
- database providers;
- email providers;
- authentication providers such as Google;
- analytics, logging, and security providers where enabled;
- service providers that help operate, maintain, secure, or improve the Services;
- institutions or administrators when you participate in an institutionally
managed course or program;
- authorities, courts, regulators, or other parties when required by law or needed
to protect rights and safety;
- parties involved in a merger, acquisition, restructuring, financing, or similar
transaction, subject to appropriate safeguards.
OpenCourses.AI does not sell personal information under this version of the policy. If OpenCourses.AI later introduces advertising, sale of personal information, or cross-context behavioral advertising, this Privacy Policy must be updated before that practice begins.
International Transfers
OpenCourses.AI may use cloud providers or technical services located outside your country. This may involve transferring, storing, or processing personal information internationally.
OpenCourses.AI should use reasonable contractual, technical, and organizational safeguards for such transfers.
Data Retention
OpenCourses.AI keeps personal information for as long as reasonably necessary to:
- provide the Services;
- maintain accounts;
- preserve learning progress;
- issue and verify completion evidence;
- comply with legal obligations;
- resolve disputes;
- enforce terms and policies;
- prevent fraud or abuse;
- maintain security logs;
- operate backups.
You may request account deletion. Some records may be retained where necessary for legal, security, audit, fraud prevention, completion evidence, dispute resolution, or legitimate operational purposes.
User Rights
Depending on applicable law, you may have rights to:
- access your personal information;
- correct or update inaccurate information;
- request deletion;
- object to certain processing;
- withdraw consent where processing is based on consent;
- request information about data processing;
- request portability where applicable;
- file a complaint with a data protection authority.
For users in Colombia, applicable rights may include knowing, updating, rectifying, requesting deletion, and revoking authorization for personal data processing where applicable under Law 1581 of 2012 and related rules.
Requests can be sent to:
[email protected]
OpenCourses.AI may need to verify your identity before responding to a privacy request.
Security
OpenCourses.AI uses reasonable technical and organizational measures to protect personal information, such as password hashing, access controls, secure sessions, limited administrative access, and operational monitoring.
No system is completely secure. You should protect your credentials and report suspected unauthorized access.
Children and Minors
OpenCourses.AI is not intended for children under 13. OpenCourses.AI does not knowingly collect personal information from children under 13 without appropriate consent.
If OpenCourses.AI learns that a child under 13 provided personal information without required consent, OpenCourses.AI may delete the information and suspend or close the account.
Users between 13 and 17 should use OpenCourses.AI only with permission from a parent, guardian, or authorized educational institution.
If OpenCourses.AI later targets children, schools, or minors directly, additional parental, guardian, institutional, and child-data safeguards must be implemented before launch.
User-Generated Course Content
If you upload or publish course content, that content may become visible to other users, administrators, institutions, or the public depending on the course status and platform settings.
Do not upload personal information of third parties unless you have a lawful basis and all required permissions. This includes student records, identifiable images, private datasets, assessment results, health data, or confidential institutional records.
Course Imports and Files
When a course package is imported into OpenCourses.AI, the platform may process the files included in the package, such as notebooks, PDFs, images, audio, code, datasets, and metadata.
Course publishers are responsible for ensuring that imported files do not contain unnecessary personal information, secrets, credentials, confidential records, unauthorized third-party data, hidden sensitive data, or content they are not authorized to process.
Temporary Notebook Labs
If OpenCourses.AI enables a temporary notebook lab, the platform may process technical session data such as user ID, course ID, unit ID, runtime profile, session status, timestamps, expiration time, operational errors, and resource limits. This data is used to start, monitor, stop, secure, troubleshoot, and improve lab sessions.
Notebook workspaces are temporary unless persistence is explicitly offered. Course packages may be mounted read-only and a notebook copy may be created in a temporary workspace for execution.
Changes to This Privacy Policy
OpenCourses.AI may update this Privacy Policy to reflect changes to the Services, legal requirements, data practices, security needs, or operational needs.
If changes are material, OpenCourses.AI may notify users or require renewed acceptance before continued use of the Services.
The version accepted by each user should be stored for auditability.
Contact
For questions, requests, or complaints about privacy, contact:
[email protected]
References for Legal Review
These references informed the drafting structure and risk areas. They are not a substitute for legal advice.
- Colombia Law 1581 of 2012, personal data protection: https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=49981
- Colombia SIC personal data policy example and data subject rights: https://sedeelectronica.sic.gov.co/politica-de-tratamiento-de-datos-personales
- Google OAuth 2.0 Policies: https://developers.google.com/identity/protocols/oauth2/policies
- Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy
- FTC COPPA Rule: https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa