Course Rep Data Protection Policy

We collect the minimum data necessary to deliver collaborative study experiences and ensure platform safety.

• Name, email address, and phone number
• School, department, and level of study
• Uploaded files and notes
• Chat messages or voice interactions within the app
• Usage analytics, diagnostics, and voluntary feedback

Your information fuels platform functionality, support, and continuous improvement. We never sell personal data to third parties.

• Provide access to learning resources, study rooms, and academic tools
• Personalize and improve your Course Rep experience
• Communicate essential product updates, service announcements, and support responses
• Detect misuse, ensure security, and maintain platform reliability
• Generate aggregated insights that help improve student outcomes

We rely on contract necessity, legitimate interests, and user consent (where required) to process data. Third-party processors are carefully vetted and only access data to provide analytics, hosting, storage, or communication services under strict confidentiality.

Data is stored in secure cloud infrastructure with layered defenses. Access is limited to authorized staff with a documented need.

• Industry-standard encryption in transit and at rest
• Role-based access controls for Course Rep staff
• Continuous monitoring and logging for suspicious activity
• Regular security reviews and vendor due diligence

We retain data only for as long as necessary to provide services and comply with legal obligations. Accounts inactive for two years are temporarily deactivated, and we notify you before permanent removal.

Where data moves across borders, we rely on recognized safeguards such as Standard Contractual Clauses and vendor certifications to keep your information protected regardless of hosting region.

You are in control of your data. Contact us anytime to exercise the rights listed below.

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete information.
• Deletion: Request permanent deletion of your account and data.
• Restriction: Limit how we process your data in specific scenarios.
• Portability: Receive your data in a structured, commonly used format.
• Objection: Opt out of certain processing, including direct marketing.

You can request a full account deletion at any time. We verify ownership and permanently erase the associated records, excluding data we must retain for legal or security reasons.

Course Rep is designed for higher-education learners. We do not knowingly collect data from children under 13, sensitive health information, or biometric identifiers.

We review this policy regularly. When meaningful updates occur, we post them here and notify impacted users before changes take effect.

Questions or concerns? Our privacy team is available to help you make informed decisions.