Privacy Policy

1. Who We Are

Course Agents AI is operated by CopyHour Inc. ("we," "us," "our"). This privacy policy covers the Course Agents AI web application at courseagents.ai, the Course Agents AI Chrome extension, the Course Agents AI chat widget, and all related Telegram bot services.

Data Controller: CopyHour Inc.
Contact: support@courseagents.ai
Address: CopyHour Inc., 440 North Barranca Street, Suite 5007, Covina, CA 91723, United States

2. What Data We Collect

Course Agents AI Web Application (courseagents.ai)

• Account information: Email address and password (via Supabase Auth)
• Course content: Text, PDFs, and URLs you import to train your AI agent
• Exercise data: AI-generated exercises and student responses
• Student interaction data: Messages between students and your AI agent via Telegram or web chat
• Billing information: Managed by Stripe — we do not store credit card numbers
• Integration tokens: Telegram bot tokens, ThriveCart API keys, Stripe connected account IDs

Course Agents AI Chrome Extension

• Page content: Text content from web pages you explicitly choose to extract (only when you click "Extract")
• Page URLs: URLs of pages you extract, used to identify the content source
• Agent ID: Your selected agent identifier, stored locally in Chrome storage
• No browsing history: We do not track, collect, or monitor your browsing activity. The extension only reads page content when you explicitly click the Extract button.

Telegram Bot Services

• Telegram user ID and name: Used to identify students and track exercise progress
• Messages: Student questions and AI responses, stored for analytics and agent improvement
• Profile photos: Telegram profile photos are downloaded and stored for display in the dashboard

3. How We Collect Data

• Direct input: When you create an account, import content, or configure settings
• Chrome extension: When you explicitly click "Extract this page" or "Extract all linked pages" — never passively or in the background
• Telegram webhook: When students send messages to your bot, Telegram delivers them to our server
• Automated processing: We generate embeddings and AI responses from your imported content

4. Why We Collect Data and Legal Basis (GDPR)

5. Chrome Extension Permissions

The Course Agents AI Chrome extension requests the following permissions:

• activeTab: Reads the content of the current page only when you click "Extract." No data is read passively or in the background.
• scripting: Injects a content extraction script into the active tab to read page text (headings, paragraphs, links). This script only runs when you click Extract.
• storage: Stores your selected agent ID locally in Chrome so you don't have to re-enter it. Also temporarily stores extracted content for transfer to the dashboard. Data remains local to your browser.
• tabs: Reads the current tab URL to detect which platform you're on (Kit, Skool, Kajabi) and customize the extraction behavior. Also used to open the dashboard tab for content import.
• Host permissions (*.vercel.app, courseagents.ai): The extension's content script runs on Course Agents AI dashboard pages to facilitate data transfer between the extension and the web app. It does not run on any other websites.

6. Third-Party Services

We share data with the following third-party services to provide the Service:

• OpenAI — We send imported course content and student messages to OpenAI's API to generate text embeddings and AI responses. OpenAI does not use API data for model training. OpenAI Privacy Policy
• Anthropic (Claude) — We send course content to Anthropic's API to generate exercises. Anthropic does not use API data for model training. Anthropic Privacy Policy
• Supabase — Our database and authentication provider. User accounts, content, and interaction data are stored on Supabase servers. Supabase Privacy Policy
• Stripe — Processes subscription payments. We do not store credit card numbers. Stripe Privacy Policy
• Telegram — Delivers bot messages to and from students. Message content passes through Telegram's servers. Telegram Privacy Policy
• Vercel — Hosts our web application and serverless functions. Vercel Privacy Policy

Data transmitted to these services is sent over encrypted connections (HTTPS/TLS). Data may be transferred to servers in the United States. For EU users, these transfers are covered by Standard Contractual Clauses or equivalent safeguards maintained by each provider.

7. Data Storage and Retention

• Account data: Retained as long as your account is active. Deleted upon account deletion request.
• Imported content: Retained as long as the agent exists. You can delete individual content sources from the dashboard at any time.
• Student interaction data: Retained as long as the agent exists.
• Chrome extension local storage: Stored locally in your browser. Cleared when you uninstall the extension or clear browser data.
• Billing data: Managed and retained by Stripe per their retention policy.

8. Data Security

We protect your data using industry-standard measures including:

• Encryption in transit (TLS/HTTPS for all data transfers)
• Encryption at rest (Supabase database encryption)
• Authentication via Supabase Auth with secure session management
• Row-level security on database tables ensuring users only access their own data
• API keys and tokens stored as encrypted environment variables

9. Your Rights

All Users

• Access: You can view all your data through the dashboard
• Deletion: You can delete content, agents, and exercises through the dashboard. To delete your account entirely, email support@courseagents.ai
• Export: Contact support@courseagents.ai to request a copy of your data

European Economic Area (GDPR)

If you are in the EEA, you have additional rights:

• Right to rectification — correct inaccurate personal data
• Right to erasure ("right to be forgotten") — request deletion of your data
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — where processing is based on consent
• Right to lodge a complaint with your local data protection authority

California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and why
• Request deletion of your personal information
• Opt out of the sale of personal information — we do not sell personal information
• Non-discrimination for exercising your privacy rights

10. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties. We do not use your data for advertising purposes. Data is shared with third-party services only as necessary to provide the Service, as described in Section 6.

11. Chrome Web Store Limited Use Compliance

The Course Agents AI Chrome extension's use of data received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements:

• Data is used only to provide the content extraction feature (the extension's single purpose)
• Data is not used for advertising or sold to third parties
• Data is not used for creditworthiness or lending purposes
• Data transfer to the Course Agents AI dashboard is necessary for the extension's functionality and occurs only with explicit user action

12. Children's Privacy

Course Agents AI is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at support@courseagents.ai and we will delete it.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this privacy policy or want to exercise your data rights, contact us:

Email: support@courseagents.ai
Address: CopyHour Inc., 440 North Barranca Street, Suite 5007, Covina, CA 91723, United States