This Privacy Policy describes how CourseSpire ("CourseSpire", "we", "us", or "our") collects, uses, stores, and protects personal and business information when you use the CourseSpire white-label EdTech software-as-a-service platform, including our website (coursespire.com), creator dashboards, white-labeled student web portals, Android mobile applications, and API services (collectively, the "Platform").
This policy applies to both Instructors/Institutes (creators, coaches, academies subscribing to CourseSpire) and Learners/Students (individuals enrolled in courses powered by CourseSpire).
1. 100% Data Ownership Principle
Unlike traditional course marketplaces or shared platforms, CourseSpire operates strictly as a white-label infrastructure provider.
Our Core Privacy Pledge to Creators:
- You Own Your Students: We will never contact, solicit, or cross-sell other courses to your enrolled learners.
- Zero Data Selling: CourseSpire never sells, rents, or monetizes student emails, phone numbers, or learning habits to advertisers.
- Complete Data Portability: You can export your full student database, revenue logs, and test results at any time via CSV or JSON.
- True White-Label Isolation: Your students interact with your academy name, your logo, your domain, and your branded communications.
2. Information We Collect
We collect only the minimum necessary information required to operate a secure educational platform:
A. Instructor & Academy Information
- Full name, business name, official email, and phone number.
- Billing address and GST/Tax identification numbers (India).
- Branding assets: custom domain details, logos, banners, faculty bios.
- Payment gateway API credentials (e.g., Cashfree merchant keys) stored in encrypted KMS vaults.
B. Student & Learner Information
- Name, email address, and mobile number provided during enrollment.
- Course progress, video completion rates, quiz responses, and certificates earned.
- Live class attendance logs and assignment submissions.
- Community discussions and doubt resolution forum interactions.
3. How We Use Your Data
The collected information is used solely for the following legitimate purposes:
- Service Delivery: Authenticating users, provisioning course video streams, generating branded completion certificates, and hosting live webinar sessions.
- Direct Payouts: Directing student course purchases to the creator's linked payment gateway with 0% platform deductions on eligible tiers.
- Performance Analytics: Providing instructors with insightful analytics regarding drop-off points, quiz pass percentages, and course revenue trends.
- Security & Anti-Fraud: Protecting educational videos against piracy, illegal screen recording, and simultaneous credential sharing.
4. WhatsApp AI Agent & Messaging Consent
CourseSpire provides creators with built-in AI WhatsApp Sales & Support Agents that operate via the official Meta WhatsApp Business Cloud API:
- Explicit Opt-in: Students only receive WhatsApp messages (e.g., class reminders, login OTPs, fee receipts, syllabus details) if they have opted in with their phone number during registration or checkout.
- Automated AI Processing: Student inquiries sent to the academy's official WhatsApp number are processed in real-time by AI models specifically trained on the creator's curriculum and FAQ sheets. Conversations are never used to train public foundation models.
- Instant Opt-Out: Any student can text "STOP" or "UNSUBSCRIBE" at any time to immediately cease automated marketing or reminder messages.
5. Video DRM & Anti-Piracy Security Data
To protect valuable intellectual property created by instructors, CourseSpire processes technical telemetry for DRM enforcement:
- Dynamic Forensic Watermarking: While a video plays, our media player renders a dynamic, moving watermark displaying the student's registered email address, IP address, and playback timestamp. This makes unauthorized screen capture easily traceable.
- Concurrent Device Restriction: We monitor active session tokens to enforce the creator's chosen concurrent device limit (e.g., maximum 1 active device per student), preventing illegal account sharing.
- No Invasive Surveillance: We do not access external student files, browsing history, or camera/microphone feeds outside active live class sessions where the student explicitly enables their camera.
6. Cloud Storage & Encryption Standards
We deploy defense-in-depth infrastructure security to protect your assets:
7. Sub-Processors & Payment Gateways
We partner with industry-leading, SOC-2 and ISO 27001 compliant infrastructure providers to run our high-performance SaaS platform:
| Partner / Sub-Processor | Purpose | Data Location |
|---|---|---|
| Cloudflare (R2 & CDN) | Video storage, global edge CDN, DDoS mitigation | Global / Edge Multi-Region |
| Amazon Web Services (AWS) | Transactional emails (Amazon SES) & database backups | ap-south-1 (Mumbai, India) |
| Meta / WhatsApp Cloud API | Automated student WhatsApp communications & AI sales agent | Encrypted Cloud Infrastructure |
| Cashfree Payments | PCI-DSS Level 1 payment gateway checkouts and auto-split payouts | India Licensed Nodes |
8. Student & Minor Privacy (DPDP Compliance)
Many coaching academies use CourseSpire to deliver K-12, competitive exam, or university preparation courses. In compliance with the Digital Personal Data Protection Act, 2023 (India) and international guidelines:
- Where learners are under 18 years of age, student enrollment must be facilitated with parental or guardian consent via the academy.
- We do not engage in behavioral tracking, profiling, or targeted advertising directed at minor students.
9. Your Rights & Data Export
Both creators and students maintain full ownership of their personal data rights:
- Right to Access & Portability: Creators can download comprehensive CSV logs of students, attendance, and sales at any moment from their dashboard.
- Right to Rectification: Users can update profile information or contact academy administrators to correct records.
- Right to Erasure (Forget Me): Upon written request to our grievance desk or academy admin, personal data will be purged within 30 days, subject to statutory tax compliance obligations.
10. Grievance Officer & Contact Information
In accordance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, you may direct any privacy questions, grievances, or data access requests to our official desk below:
CourseSpire Privacy & Grievance Desk
Official Email: privacy@coursespire.com
Direct Support Line / WhatsApp: +91 92252 58960