// privacy

Privacy Policy

This Policy explains what Astudylab collects, why it is used, who receives it, and the choices available to account holders, organization owners, mentors, and learners.

Effective and last updated: July 19, 2026

1. Scope and contact

This Policy applies to astudylab.com, the Astudylab application, and related support communications. Astudylab is responsible for the service-level processing described here. An organization can also control the learner and workspace data it submits and may have its own privacy obligations.

Privacy questions and requests can be sent to the contact address below.

2. Information we collect

We collect information you provide, information created as you use the service, and limited technical information needed to operate and protect it.

  • Account and profile data, including name, email address, preferred language, authentication identifiers, organization, and role.
  • Learning and workspace data, including enrollments, lesson progress, quiz attempts, task assignments and submissions, pull-request links, mentor conversations, feedback, cohort membership, analytics, and completion records.
  • Organization content and settings, including curriculum drafts, branding, invitations, and AI prompts or content submitted to AI features.
  • Billing records, including Stripe customer and subscription identifiers, plan, billing interval, active-learner usage, invoice status, and payment status. Astudylab does not receive or store full card numbers.
  • Technical and security data, such as session information, IP-derived security signals, rate-limit records, application logs, device or browser information, locale preferences, and service analytics.
  • Support communications and any information included when you contact us.

3. How we use information

We use information to provide and personalize learning, authenticate users, isolate organizations, operate cohorts, calculate progress and active-learner billing, generate AI-assisted responses, send service communications, provide support, prevent abuse, diagnose errors, improve reliability, and meet legal obligations.

Depending on location and context, processing is based on providing the requested service, legitimate interests in operating and securing it, consent where required, and compliance with law.

4. Service providers and AI processing

We use specialist providers to run the service. They process data under their own contractual and security obligations and only for the functions we enable.

  • Clerk for authentication and account identity.
  • Stripe for checkout, subscriptions, invoices, payment methods, refunds, and billing-portal services.
  • Vercel for application hosting and service analytics, and Neon for managed PostgreSQL data storage.
  • Anthropic for AI mentor and AI authoring requests when those features are used.
  • Resend for transactional email and Upstash for rate limiting and abuse prevention.

5. When information is shared

We share information with the providers above, with organization owners and authorized members according to their roles, when required by law or necessary to protect users and the service, and as part of a legitimate merger, financing, or transfer of the business with appropriate protections.

We do not sell personal information or use learning data for third-party advertising.

6. International processing

Astudylab and its providers can process information in countries other than where a user lives. Where required, we rely on contractual or other lawful safeguards for international transfers.

7. Retention

We retain account, organization, and learning data while needed to provide the service and for legitimate security, support, dispute, accounting, and legal purposes. Billing and transaction records can be kept longer where tax, financial, or fraud-prevention rules require it.

When data is deleted or an account closes, residual copies can remain temporarily in protected backups and logs until normal retention cycles complete.

8. Security

We use access controls, tenant isolation, encryption for sensitive stored settings, signed webhooks, and reputable infrastructure providers to protect information. No online service can guarantee absolute security, so keep credentials private and report suspected compromise promptly.

9. Cookies and analytics

Astudylab uses essential cookies or similar storage for authentication, security, and language preferences. Service analytics help us understand aggregate use and performance. We do not use the service to serve third-party behavioral advertising.

10. Your choices and rights

You can update basic profile and billing information in the application or Stripe billing portal. Depending on applicable law, you can request access, correction, deletion, restriction, objection, or a portable copy of personal information.

Organization-controlled information may require coordination with the organization owner. We may verify identity and retain information that law or legitimate security and accounting needs require.

11. Changes to this Policy

We may update this Policy when the service, providers, or legal requirements change. We will update the effective date and provide additional notice for material changes where required.

Privacy questions or data requests? Contact hello@astudylab.com