This policy explains what personal data Microcourse collects, why we collect it, who we share it with, and how you can control it.
Microcourse is operated by VSX Labs, which is the data controller for the personal data described in this policy. VSX Labs is the single entity responsible for Microcourse; any other names you may see on our sites refer to other products we run, not to a separate operator of this one.
For any privacy question or request, write to [email protected]. This is the only address we use for privacy correspondence, and it is monitored by the people who operate the service.
When you create an account we collect your email address, and your name and profile picture if your sign-in provider supplies them. Accounts are held in Amazon Cognito. If you sign in with Google or Apple, we receive your basic profile from that provider; we never receive your password. If you register with a password, the password is held by Amazon Cognito and is never visible to us.
We store the courses and learning plans you generate or save, the topics and instructions you enter when generating them, which sections you have completed, and the slides you bookmark. This is what makes your course library and progress work across sessions.
Our analytics provider collects standard web analytics about your visit — pages viewed, approximate location derived from your IP address, browser and device type, and referring site. Our servers also keep short-lived request logs for security and debugging.
Microcourse is currently free and takes no payments, so we do not collect or store card details, billing addresses, or any other payment information.
Running the service: to authenticate you, generate the courses you ask for, and keep your library and progress. Legal basis: performance of our contract with you.
Service email: to send account email such as address verification and password resets. We do not run a marketing mailing list, and we do not sell or rent your data to anyone.
Improving the platform: to understand aggregate usage and fix problems. Legal basis: our legitimate interest in maintaining and improving the service.
We use the following providers to operate Microcourse. Each processes data only to provide its part of the service.
Hosting, database, and account management (Amazon Cognito). Your account and learning data are stored in AWS's Frankfurt region (eu-central-1) in the European Union.
Course and learning-plan generation. The topic and instructions you type when generating a course are sent to OpenAI to produce the content. Do not put personal or confidential information into a generation prompt. This transfer is to the United States and relies on the provider's standard contractual clauses.
Usage analytics, as described above. This transfer is to the United States and relies on the provider's standard contractual clauses.
Sign-in, if you choose to use them. They tell us who you are; we do not tell them what you do on Microcourse.
We may also disclose data where we are legally required to, or to protect the security of the service.
Account and learning data are stored in the European Union (AWS Frankfurt, eu-central-1). Traffic to and from Microcourse is encrypted with TLS, data is encrypted at rest, and access to production systems is limited to the people who operate the service.
We keep your account and learning data for as long as your account exists. If you ask us to delete your account, we remove your account and learning data within 30 days, except where we are required to retain something by law. Analytics data is retained according to the analytics provider's standard retention period.
If you are in the European Economic Area or the United Kingdom, the GDPR gives you the rights below. We honour these requests for everyone, wherever you are.
You can ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it and close your account. You can update your name and profile details yourself in your profile settings; for anything else, email [email protected]. We respond within 30 days.
You can ask us to export your data in a machine-readable format, object to processing we carry out on the basis of legitimate interest, or ask us to restrict processing while a dispute is resolved.
Microcourse sets cookies that are necessary to keep you signed in and to remember your interface preferences, and Google Analytics sets its own cookies to measure usage. You can block or clear cookies in your browser, or install Google's opt-out add-on, to stop analytics collection; the rest of the site will keep working.
If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to your local data protection supervisory authority.
Microcourse is not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will delete it.
We may update this policy as the service changes. The date at the top of this page always reflects the last substantive change. If a change materially affects how we handle your data, we will tell you by email or in the app before it takes effect.
Email VSX Labs and a person will read it. See also our Terms of Service.
[email protected]