Legal

Privacy Policy

Last updated: April 20, 2026

This Privacy Policy explains what information CourseLytics collects, how we use it, who we share it with, and the choices you have. We keep this policy plain-spoken on purpose.

1. Information You Provide

Account information. Name, email address, hashed password, organization name, time zone, and theme preference.
Billing information. Subscription status, plan, and a Stripe customer ID. Card numbers are handled directly by Stripe — we never see or store them.
Kajabi credentials. The API key and site identifier you provide to connect a Kajabi site. These are stored encrypted at rest and used only to fetch your data on your behalf.
Support correspondence. Anything you email us or share in support tickets.

2. Information We Sync From Kajabi

When you connect a Kajabi site, we read and store the following on a recurring basis:

Offers (titles, prices, status)
Contacts (name, email, tags, custom fields, created date)
Purchases (offer, amount, status, date)
Transactions (charge amount, refunds, date)
Form submissions and assessment activity used for funnel analytics

We do not sync passwords, payment instruments, or course content from Kajabi. We access Kajabi as a read-only consumer.

3. Information We Collect Automatically

Usage logs. Page views, feature usage, IP address, user agent, and timestamps.
Cookies. A session cookie to keep you signed in, a CSRF token cookie for security, and a theme preference cookie. We do not use third-party advertising cookies.

4. How We Use Information

To provide the analytics, dashboards, exports, and AI features you signed up for.
To bill you and manage your subscription.
To send you product, billing, security, and support emails.
To monitor performance, debug issues, and prevent abuse.
To comply with legal obligations.

We do not sell your personal information. We do not share your data with advertisers. We do not use your business data to train AI models.

5. AI Processing

When you generate an insight or send a chat message, CourseLytics builds a structured summary of your business metrics (aggregated revenue, funnel performance, offer-level totals) and sends that summary to a third-party large language model provider for the sole purpose of generating your response. We do not include personally identifiable contact-level data such as buyer names or email addresses in those AI prompts. Our LLM provider is contractually prohibited from using your prompts to train its models.

6. Service Providers (Sub-processors)

We share data with the following providers strictly to operate the Service:

Replit / Google Cloud — application hosting and managed PostgreSQL.
Stripe — subscription billing and payment processing.
SendGrid — transactional email delivery (verification, password reset, billing receipts).
Google (Gemini) — large language model that powers the AI insight and chat features.
Kajabi LLC — the data source you connect; data only flows from Kajabi to CourseLytics, not the other way around.

7. Data Retention

While your account is active, we retain your data so that you can use the Service.
If you delete a Kajabi site connection, the cached data for that site is deleted within 30 days.
If you close your account, we delete or anonymize your account and synced data within 60 days, except where we are required to retain billing records for tax or accounting purposes.
Backups are retained for up to 35 days and then expire.

8. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, email privacy@courselytics.com. We will respond within 30 days.

Self-serve export and deletion. Account owners can also export their organization's data as a ZIP of CSV files, and permanently delete their account at any time, from the Settings page. Deletion immediately removes the organization (when the last admin leaves) and scrubs the user's profile.

9. International Transfers

CourseLytics is operated from the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to and processed in the U.S., where data protection laws may be different from those in your country.

10. Children

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in-app notice before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.

12. Contact

Questions or requests regarding this Privacy Policy: privacy@courselytics.com.