Privacy policy

Last updated: [DATE] · Effective: [DATE]

The short version

  • We collect only what we need to run Edredo and the academies built on it.
  • On an academy's subdomain or custom domain, that academy decides how learner data is used — we process it on their behalf.
  • We never sell your personal information. You can access, export or delete it at any time.

1. Who we are

Edredo ("Edredo", "we", "us") is operated by [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS]. This policy explains how we handle personal information when you visit edredo.com, use the Edredo apps, or use any academy hosted on an edredo.com subdomain or a custom domain connected to Edredo.

2. Edredo and academy owners

Edredo hosts academies run by independent educators, institutes and organizations ("Academy Owners"). Each academy is available on its own subdomain (for example name.edredo.com) or on a custom domain the Academy Owner controls.

On edredo.com
Edredo decides how your data is used and is responsible for it.
Inside an academy
The Academy Owner decides how learner data is used; Edredo processes it for them under their instructions.

If you are a learner in an academy, please also read that academy's own privacy notice and contact the Academy Owner with requests about your data there.

3. Information we collect

Account information — name, email address, password, profile photo, and role (learner, educator or organization admin).

Learning activity — classrooms and courses joined, progress, quiz attempts and scores, submissions in workrooms, and attendance in live sessions.

Content you create — courses, lessons, files, posts, comments and messages.

Academy & domain details — academy name, branding, chosen subdomain, connected custom domains and the DNS records used to verify them.

Payment information — for paid courses, payments are handled by our payment processor (such as Razorpay). We receive transaction details but not your full card number.

Device & usage data — IP address, browser and device type, pages visited and crash logs, collected automatically.

4. How we use information

  • To provide, host and secure the platform and every academy on it.
  • To route visitors to the correct academy based on the subdomain or custom domain they visit.
  • To process payments and send receipts.
  • To send service messages, and — with your consent where required — product updates.
  • To understand usage and improve Edredo, using aggregated or de-identified data where possible.
  • To comply with law and prevent fraud or abuse.

5. Subdomains & custom domains

When an Academy Owner connects a custom domain, we store the domain name and verification records, and request TLS certificates from a certificate authority so the academy is served over HTTPS. Sign-in sessions are scoped to the domain you are visiting, so an account session on one academy does not automatically carry over to another domain.

Subdomain and custom-domain names may be publicly visible through DNS and certificate transparency logs; please don't put personal information in a domain name.

6. Sharing

We do not sell personal information. We share it only with: the Academy Owner of an academy you join; service providers who host, secure, email or process payments for us; integrations an academy turns on (such as Slack, Microsoft Teams, Webex, Discord or Telegram); and authorities where required by law. [List sub-processors or link to a sub-processor page.]

7. Cookies

We use essential cookies to keep you signed in and secure your session, and optional analytics cookies to understand usage. You can manage optional cookies from the cookie settings link in the footer of any page.

8. Retention & security

We keep personal information while your account is active and for up to [X] days after deletion, unless the law requires longer. Data is encrypted in transit and protected by access controls. No system is perfectly secure, and we will notify affected users and regulators of a breach as required by law.

9. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. Use account settings or email [[email protected]]. For data held by an academy, contact its Academy Owner — we will help them respond.

10. Children

Users under [AGE] may use Edredo only through an academy, school or organization that has obtained any consent required from a parent or guardian. We do not knowingly collect children's data otherwise.

11. Changes & contact

We'll post updates here and notify you of material changes by email or in the app. Questions? Contact our privacy team at [[email protected]] or [GRIEVANCE OFFICER NAME, ADDRESS].