Privacy Policy
Last updated: 15 September 2026
This policy explains what information CourseIO (“we”) collects when you use CourseIO.ai, why we collect it, and the choices you have. The data controller is DevsVilla International Pvt. Ltd., the company behind CourseIO, based in India.
Information we collect
When you create an account, we collect your name, email address, and date of birth. When you use CourseIO, we store the course material you upload, the prompts you give us, and the courses, scripts, slides, video, audio, and quizzes we generate for you. We also keep basic security and sign-in information — sign-in timestamps and IP address — and, if you subscribe, billing details processed through Razorpay (we don’t store your card number). If you connect a YouTube channel, we store the connection’s account name and access tokens; see the Google & YouTube section below.
How we use it
We use your information to run CourseIO: authenticating you, generating and storing your courses, processing payments, and keeping your account secure. We don’t sell your personal information, and we don’t use your course content or uploaded material to train models for anyone else.
Our legal bases
Where the UK GDPR or EU GDPR applies, we rely on the following legal bases. Performance of a contract: creating your account, generating and storing courses, team invitations, and billing — we cannot provide the service without this. Legitimate interests: keeping the service secure (sign-in records, rate limiting), fixing errors (error reports sent to Sentry with passwords, codes and tokens removed), and sending service emails about your account. Our interest in running a reliable, secure service does not override your rights, and you can object at any time. Consent: optional analytics cookies (PostHog), which only run after you opt in through the cookie banner, and connecting a YouTube channel. You can withdraw consent at any time — from the cookie banner, or by disconnecting the channel — without affecting anything that happened before. Legal obligation: keeping invoices and payment records for tax and accounting law.
Who we share it with
Generating a course means sending parts of your content to the services that do the work: our AI providers (for course structure, scripts, and quizzes), ElevenLabs (for voice narration), and AssemblyAI (for transcription and subtitles). Razorpay processes payments, and Google/YouTube handles publishing if you choose to connect a channel. Behind the scenes, Amazon Web Services EMEA SARL hosts the application and your data, Postmark delivers our emails, Sentry receives error reports, and — only if you opt in — PostHog receives product analytics. The full, current list — with what each one does and what data it sees — is on our subprocessors page. We don’t sell your data to anyone, and we only share it with these providers to the extent needed to run the product.
Google API Services & YouTube
CourseIO’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. If you connect a YouTube channel, CourseIO uses YouTube API Services to upload videos on your behalf; by connecting your account, you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy. We store your channel name and OAuth access/refresh tokens (encrypted) so we can publish on your behalf; we don’t access any other YouTube data. You can revoke access any time from Settings → Publishing → Disconnect or directly from myaccount.google.com/permissions.
Where your data goes (international transfers)
CourseIO is operated from India and hosted with Amazon Web Services EMEA SARL in Frankfurt, Germany (EU, eu-central-1). Some of the providers on our subprocessors page are in the United States (our AI, voice, transcription, analytics and email providers). If you are in the UK or the European Economic Area, this means your data is transferred outside those regions. We only do so under recognised safeguards: the European Commission’s Standard Contractual Clauses (with the UK Addendum or the UK International Data Transfer Agreement where UK data is involved), or, where a provider is certified, the EU-US Data Privacy Framework. Our own access from India is likewise covered by the Standard Contractual Clauses. You can ask us for a copy of the safeguards in place at privacy@courseio.ai.
Data retention
We keep your account and course data for as long as your account is active. Billing records are kept for as long as applicable tax and accounting law requires, even after an account is closed. See our data deletion page for how to have your data removed.
Cookies & local storage
CourseIO uses a small number of strictly necessary cookies and local storage entries to keep you signed in and remember your preferences, and — only with your consent — PostHog analytics cookies. Details, and how to change your choice at any time, are on our Cookie Policy.
Your rights
You can access and update your profile information from within CourseIO at any time. To access, correct, export, or delete your data, or to object to how it’s used, see our data deletion page or email privacy@courseio.ai. We respond to verified requests within 30 days (one month under the GDPR, extendable where a request is complex, in which case we tell you). Under the UK GDPR and EU GDPR you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right not to be subject to solely automated decisions with legal effects — we make none. If you are unhappy with how we handle your data you can complain to your supervisory authority: in the UK the Information Commissioner’s Office (ico.org.uk), in the EEA your national data-protection authority, and in India the Data Protection Board under the Digital Personal Data Protection Act 2023. We would appreciate the chance to resolve your concern first.
Children’s privacy
CourseIO is intended for adults creating educational content, not for use by children. We don’t knowingly collect information from children under the age required by applicable law to consent to data processing on their own.
Changes to this policy
If we make a material change to this policy, we’ll update the date at the top of this page and, where appropriate, let you know directly.
Contact us
Questions about this policy or your data can go to privacy@courseio.ai or through our contact page.