Privacy Policy

Effective 31 August 2026

This policy explains what Rishab Ali Muhammad ("we") collects when you use Coursepad. The short version: your coursework never leaves your computer, and the account server only knows your email and your subscription status.

Data that stays on your device

Your calendar entries, to-dos, documents, folder settings, and everything you type into the App are stored only in the folder you choose on your computer. We never receive or store this data. There is no analytics or telemetry in the App.

Data the account server holds

• Your email address — to identify your account and send sign-in links.
• Subscription state — plan, trial/renewal dates, and any add-ons you own, mirrored from Stripe.
• A Stripe customer ID — to link your account to your billing record.
• Device tokens — random per-device identifiers so the App can confirm your subscription. These contain no personal information.
• Short-lived sign-in requests — deleted automatically within one hour.

We do not use tracking cookies. The account server keeps minimal request logs (including IP address) for a short period for security and abuse prevention.

Payment data

Payments are handled entirely by Stripe. We never receive your full card number. See Stripe's privacy policy for how they handle payment data.

Service providers (subprocessors)

• Stripe — payment processing and subscription management.
• Resend — sending transactional sign-in emails.
• Vercel — hosting the account server and this website.
• Upstash — the database that stores the account records listed above.

Why we can process this data

We process your email and subscription data to provide the service and perform our contract with you, and we keep limited security logs on the basis of our legitimate interest in protecting the service.

How long we keep it

Account records are kept while your account is active and for a reasonable period afterwards for tax and accounting purposes, then deleted. Sign-in requests expire within an hour. Security logs are rotated on a short cycle.

Your rights

You can ask us to show you the data we hold about you, correct it, or delete your account and its data. Email rishab.alim@gmail.com and we will respond within 30 days. Depending on where you live you may also have the right to object to processing, to data portability, or to lodge a complaint with your local data-protection authority.

Children

Coursepad is not directed to children under 13, and we do not knowingly collect data from them. You must be old enough to enter a binding contract where you live, or have a parent or guardian's consent.

International transfers

Our providers may process data in the United States and other countries. Where required, they rely on standard contractual clauses or equivalent safeguards.

Changes

We will update the "Effective" date above when this policy changes and notify active subscribers by email of material changes.

Questions? Email rishab.alim@gmail.com.