In short
- These companies process personal data for us to run Course AI Builder: hosting, email delivery and AI generation.
- AI providers (OpenAI and Anthropic) receive your prompts, document text and course content, not your name or email address, under API terms that do not allow using API data to train models by default.
- Paddle handles orders and payments as an independent controller, not as our processor.
- We update this page and notify business customers before a new subprocessor starts.
Processors
| Processor | Purpose | Data | Location |
|---|---|---|---|
| Hetzner Online GmbH | Hosting of the application, its database, file storage and backups | All service data | Germany |
| Sendinblue SAS (Brevo) | Email delivery (account confirmation, password reset, service notices) | Name, email address, message content | France |
| OpenAI, L.L.C. | AI generation of course text and module illustrations from your prompts and documents | Course topic, instructions, extracted document text, course content; no name or email address | United States |
| Anthropic, PBC | AI generation of course text from your prompts and documents | Course topic, instructions, extracted document text, course content; no name or email address | United States |
Entries marked TO CONFIRM will be completed before the service is generally available.
AI providers
AI providers receive the topic, your instructions, the extracted document text and the course content a request needs. They do not receive your name, email address or account details. We use them under their API terms, which do not allow using API data to train models by default. Some providers keep inputs and outputs for a limited period, typically up to 30 days, to detect abuse, and then delete them.
Independent controllers
| Company | Role | Data |
|---|---|---|
| Paddle.com Market Limited (Paddle) | Merchant of Record: checkout, payment, tax, invoicing, refunds and chargebacks | Name, email address, billing address, payment details, tax identifiers, order history |
Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries about orders and payments and handles returns. Paddle decides how it processes order and payment data and is responsible for it under its own privacy notice.
Changes
We update this page before a new subprocessor starts processing personal data. Business customers who accepted the Data Processing Terms are also told by email at least 30 days in advance and can object as described there.