Privacy Policy
Last updated: 27 July 2026
This Privacy Policy explains what personal data coursecast — operated by Tomas Sestak, based in the Czech Republic (“we”, “us”, “our”) — collects when you use the Service, why we collect it, who we share it with, and the choices you have. We aim to collect the minimum needed to run a course-generation product you can trust.
Information we collect
We collect the following categories of data:
- Account data — your email address, and any name or profile details you provide when you register.
- Usage data — the course topics you submit, the courses you generate, feature usage, standard log data, device and browser information, and approximate location derived from your IP address.
- Payment data — when you buy credits, billing details are collected and processed by Stripe. We receive a token, the last four digits, and status — we never see or store your full card number. We also keep your credit balance and purchase history so your account works.
- Support data — messages you send us and the context needed to help.
How we use your data
We use personal data to:
- Provide, maintain, and secure the Service, including generating your courses.
- Process payments, prevent fraud, and send receipts and service notices.
- Respond to support requests and communicate about your account.
- Understand usage in aggregate so we can improve the product.
- Comply with legal obligations and enforce our Terms.
Our legal bases include performing our contract with you, your consent (where required), our legitimate interests in operating the Service, and legal compliance.
Cookies & similar technologies
We use a small number of cookies and similar technologies to keep you signed in, remember preferences, and measure aggregate usage. Strictly necessary cookies are always on; where required, we ask for consent before setting analytics cookies. You can control cookies through your browser settings.
Third parties & subprocessors
We do not sell your personal data. We share it only with vendors who help us run the Service, under contracts that require them to protect it:
- Supabase — authentication and database hosting for your account and course data.
- Stripe — payment processing (we never see full card numbers).
- Resend — transactional email, such as receipts, course-ready notices, and sign-in emails, sent from hello@trycoursecast.com.
- Infrastructure providers used to deliver and support the Service.
Some providers may process data outside your country; where they do, appropriate safeguards (such as standard contractual clauses) apply.
Data retention
We keep personal data for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting, or fraud-prevention needs. When you delete your account, we delete or anonymize your data within a commercially reasonable timeframe, except where retention is legally required.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can:
- Access and update most account data directly in settings.
- Request a copy or deletion of your data by emailing privacy@trycoursecast.com.
- Lodge a complaint with your local data-protection authority.
Security
We use encryption in transit, access controls, and reputable infrastructure providers to protect your data. No system is perfectly secure, but we work to protect your information and will notify you and regulators of a breach where the law requires.
Children
The Service is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email or in-product. The “Last updated” date above always reflects the current version.
Contact
Questions or requests about your privacy? Email us at privacy@trycoursecast.com.