Privacy Policy

1. Controller

Kursoo, based in Baku, Azerbaijan, is the controller for account and product data processed on kursoo.app and kursoo.az. Contact: [email protected].

2. What we process

For the software subscription we process the account holder’s name, email, organization name, chosen plan, billing country and support messages. Learning centers may store their own student, staff and schedule records inside the product. That data is processed so the center can run its operations.

We do not sell personal data. We do not use school records for advertising.

3. GDPR

Where the EU General Data Protection Regulation applies, we rely on contract (to provide the subscription), legitimate interests (to keep the service secure and to understand product usage in aggregate) and consent where a consent banner or optional message requires it.

Customers in the EEA can ask for access, correction, deletion, restriction or a copy of their account data, and can object to processing based on legitimate interests. Email [email protected]. You may also lodge a complaint with your local supervisory authority.

4. How data is stored

Account and school data are stored on access-controlled servers, transmitted over TLS, and kept only for as long as the account is open and as required for security, accounting and legal claims. Card numbers and card security codes are not stored on Kursoo servers.

International subscription payments are securely processed by Paddle.com (Merchant of Record). Paddle processes payment details under its own privacy policy. Payments in AZN are handled by the local payment provider, which also receives card details directly.

5. Processors

We use infrastructure and email providers to host the application and deliver service messages, and Paddle to sell the international subscription. They process data only on our instructions or as an independent controller for the payment, and only for that purpose.