Privacy Policy

Information We Collect

Account Information

When you create an account we collect your name, email address, and a hashed password (or OAuth token if you sign in with a third-party provider). Profile information you choose to add — such as a display name or avatar — is also stored.

Usage Data

We collect information about how you interact with the platform: which titles you view, how far through them you progress, search queries, bookmarks, and feature usage. This data powers your personalised recommendations and learning history.

Payment Data

Payment card details are processed directly by Stripe and never stored on our servers. We retain non-sensitive billing information (last four digits, card brand, billing address, and transaction IDs) for invoicing and dispute purposes.

Device & Technical Data

We automatically collect IP address, browser type, operating system, referring URLs, and device identifiers to secure your account, diagnose technical issues, and enforce our Terms of Service.

Communications

If you contact our support team or submit instructor applications we retain those communications to resolve your enquiry and improve our service.

How We Use Your Information

We use the data we collect to:

• Provide, maintain, and improve the EDU Stream platform
• Process payments and manage your subscription
• Personalise your content feed and recommendations
• Send transactional emails (receipts, password resets, course completions)
• Send marketing communications, with your consent, where required by law
• Detect fraud, enforce our policies, and comply with legal obligations
• Generate aggregated, anonymised analytics for internal research
• Issue completion certificates and track your learning progress

We rely on the following legal bases under GDPR: contract performance (to deliver the service you subscribed to), legitimate interests (platform security and analytics), and consent (marketing emails and non-essential cookies).

Sharing & Disclosure

We do not sell your personal data. We share information only in these circumstances:

• Service providers — third parties that help us operate the platform under strict data-processing agreements: Stripe (payments), Clerk (authentication), Cloudflare (video delivery and storage), Resend (email), and our hosting provider.
• Legal requirements — when required by law, court order, or to protect the rights and safety of EDU Stream and its users.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may transfer to the successor entity subject to the same privacy protections.
• With your consent — in any other circumstance, only with your explicit permission.

Cookies & Tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the platform is used.

• Essential cookies — required for authentication and security. These cannot be disabled.
• Analytics cookies — help us understand aggregate usage patterns. You can opt out via our cookie banner or your browser settings.
• Preference cookies — remember settings such as playback speed and theme.

You can manage or withdraw cookie consent at any time using the cookie settings accessible from our footer. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

Data Retention

We retain your account data for as long as your account is active or as needed to provide the service. If you delete your account we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law (for example, financial records required for tax purposes, which we keep for 7 years).

Aggregated, anonymised analytics data — which cannot identify you — may be retained indefinitely for research purposes.

Your Rights

Depending on your location you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — ask us to correct inaccurate data
• Deletion — request erasure of your personal data
• Portability — receive your data in a portable format
• Objection — object to processing based on legitimate interests
• Restriction — request we limit how we use your data
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

California residents have additional rights under the CCPA, including the right to know, delete, and opt out of the sale of personal information (we do not sell personal information).

To exercise any of these rights, email us at privacy@edustreamed.com. We will respond within 30 days.

Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage for sensitive fields, and access controls that limit who within our team can access personal data. However, no system is completely secure. If you discover a vulnerability please report it to security@edustreamed.com.

Children's Privacy

EDU Stream is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. When we make material changes we will notify you by email or by posting a notice on the platform at least 14 days before the changes take effect. Your continued use of EDU Stream after the effective date constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Protection team: