Privacy Policy
Last updated: July 10, 2026
EduCafe is operated by Triples Global LLC, a California limited liability company. This Privacy Policy explains what data EduCafe collects, how we use it, and the choices you have.
Data we collect
- Account: name, email, role, organization membership. Sign-in is handled by Clerk (our authentication provider); we never store passwords.
- Learning activity: enrollments, progress, checkpoint answers, notes, saved questions, chat messages.
- Payments: Stripe processes and stores card data. We store transaction records (amount, course, status).
- Engagement telemetry: module time-on-task, heartbeat events, aggregate engagement scores (used for instructor analytics).
- Technical: IP address, user-agent, session cookies, error traces via Sentry.
How we use it
- To deliver courses and track your progress.
- To process payments and issue payouts to instructors.
- To power AI chat and content generation features.
- To give instructors aggregate engagement insights about their courses.
- To secure the platform (rate-limiting, fraud detection).
Third-party processors
We rely on the following providers to run the service, each acting as a data processor under its own agreement: Clerk (authentication and session management), Neon (database hosting), Cloudflare R2 (file and media storage), Vercel (application hosting and, with your consent, analytics), Upstash (rate limiting), Stripe (payments), Resend (transactional email), and Sentry (error telemetry).
AI processing
Your messages in the AI chat and AI sandboxes are sent to Vercel AI Gateway, which routes to model providers (Anthropic, OpenAI, Google, Perplexity, Meta) for response generation. The specific provider depends on the model the instructor selected for a given sandbox; the student-facing course chat uses Anthropic.
Module text and uploaded documents are sent to Voyage AI to generate vector embeddings used for retrieval-augmented chat. Files uploaded to the course planner are sent to Anthropic for outline generation.
These third parties may temporarily process your content per their own privacy policies. We do not use your messages to train third-party models.
We log the request, the response, and token counts to an internal AIResponseLog table for billing and abuse detection. Logs are retained for 30 days.
Your rights (GDPR / CCPA)
You can export or delete your data at any time from Settings → Account. Export returns a JSON bundle of your profile, enrollments, progress, notes, chat history, and transactions. Deletion removes your personal data from our systems within 30 days; anonymized analytics aggregates may be retained.
Data retention
Account data is retained while your account is active. Transaction records are retained for 7 years for tax/audit purposes. Engagement events older than 2 years are aggregated and anonymized.
Cookies and analytics
Essential cookies (session, security, preferences) are always on. Vercel Analytics is optional and only runs if you accept it in the consent banner; declining does not change how the site works. Sentry error telemetry runs to keep the service reliable (legitimate interest).
Security
Authentication is delegated to Clerk; we never store passwords. Data in transit uses TLS. Accounts can be suspended platform-wide, invalidating active sessions. Payment data is never stored on our servers.
Children
EduCafe is not directed at children under 13 (or under 16 in the EU/EEA). Sign-up includes a date-of-birth check against those minimums; the date of birth itself is validated and discarded, not stored. If you believe we have collected data from a child below the applicable age, contact us and we will remove it.
Contact
Triples Global LLC (d/b/a EduCafe) — questions or data requests: cafe@edu.cafe