Privacy Policy
Effective date: July 16, 2026 · Last updated: July 16, 2026
EdUp Leadership ("EdUp Leadership," "we," "us," or "our") operates the website and platform located at edupleadership.com (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or use our Platform. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Platform.
1. Information We Collect
1.1 Information you provide directly
We collect information you provide when you create an account, use the Platform, or contact us:
- Name and email address provided during Google OAuth sign-in or contact form submission
- Institution name and your role (e.g., President, VP of Enrollment) when generating reports or contacting us
- Institution type and enrollment size when generating personalized reports
- Questions and prompts submitted to the AI feature
- Feedback and messages submitted through the contact form or in-app feedback tool
- Payment information processed through Stripe (we do not store card numbers — see Section 4)
1.2 Information collected automatically
When you use the Platform we automatically collect certain information:
- Pages visited and features used within the Platform
- Episodes viewed, bookmarked, and questions asked
- Reports generated and topics selected
- Device type, browser type, and operating system
- IP address and approximate geographic location
- Referring URL and how you arrived at the Platform
- Trial start date and subscription status
1.3 Information from third parties
We receive limited information from the following third-party services when you use them to interact with our Platform:
- Google: when you sign in with Google OAuth, we receive your name and email address from Google. We do not receive your Google password.
- Stripe: when you subscribe, Stripe confirms payment success and provides subscription status. We do not receive your full card number.
2. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Description |
|---|---|
| Providing the Platform | To create and manage your account, deliver AI responses, generate personalized reports, and provide access to the presidential episode library. |
| Personalization | To tailor content, suggested questions, and report themes to your institution type and role. |
| Email communications | To send trial reminders, subscription confirmations, platform updates, and the weekly digest of new episodes. You may opt out of marketing emails at any time. |
| Customer support | To respond to your contact form submissions, feedback, and support requests. |
| Billing | To process subscription payments and manage your subscription status through Stripe. |
| Platform improvement | To understand how users interact with the Platform and improve features, content, and user experience. |
| Safety and security | To detect and prevent fraud, abuse, and unauthorized access to the Platform. |
| Legal compliance | To comply with applicable laws, regulations, and legal processes. |
3. How We Share Your Information
We do not sell your personal information. We do not share your information with advertisers. We share your information only in the following limited circumstances:
3.1 Service providers
We share information with trusted third-party service providers who assist us in operating the Platform. These providers are contractually obligated to use your information only to provide services to us:
| Provider | Purpose | Data shared |
|---|---|
| Stripe | Payment processing and subscription management | Email address, subscription details. Stripe stores payment card data on our behalf under PCI DSS compliance. |
| Kit (formerly ConvertKit) | Email marketing and subscriber management | Email address, name, institution, subscription status, and behavioral tags (e.g., trial-user, paid-user). |
| Anthropic | AI response generation | Your questions and prompts are sent to Anthropic's API to generate responses. Anthropic processes this data per their own privacy policy. |
| base44 | Platform infrastructure and hosting | All Platform data is hosted on base44's infrastructure. |
3.2 Legal requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
3.3 Business transfers
If EdUp Leadership is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.
4. Payment Information
All payment transactions are processed by Stripe, Inc. We do not store your credit card number, CVV, or full payment card details on our servers. Stripe stores and processes payment information in accordance with PCI DSS standards. For more information on how Stripe handles your data, please review Stripe's Privacy Policy at stripe.com/privacy.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you the Platform. Specifically:
- Account information is retained while your account remains active.
- After account deletion, we retain anonymized usage data for platform analytics purposes.
- AI questions, report content, and bookmarks are deleted within 90 days of account deletion upon request.
- Payment records are retained for 7 years as required for tax and accounting compliance.
- Email communications are retained in Kit until you unsubscribe or request deletion.
6. Your Rights and Choices
6.1 Email communications
You may opt out of marketing emails at any time by clicking the unsubscribe link in any email we send. You will continue to receive transactional emails related to your account and subscription (e.g., payment confirmations, trial expiry notices).
6.2 Account information
You may update your account information by logging into the Platform. You may request correction of inaccurate information by contacting us at edupexperience@gmail.com.
6.3 Account deletion
You may request deletion of your account and associated personal data by contacting us. We will process deletion requests within 30 days. Note that deletion of your account will immediately terminate your access to the Platform, including any saved reports, bookmarks, and AI history. Payment records will be retained as required by law.
6.4 Data access and portability
You may request a copy of the personal information we hold about you by contacting us. We will provide this information in a commonly used, machine-readable format within 30 days.
6.5 California residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at edupexperience@gmail.com.
6.6 European residents
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to lodge a complaint with your local supervisory authority. Our legal basis for processing your data is performance of our contract with you (providing the Platform) and our legitimate interests (improving the Platform and preventing fraud). Contact us at edupexperience@gmail.com to exercise your GDPR rights.
7. Cookies and Tracking
The Platform uses essential cookies and similar tracking technologies to operate. Specifically:
- Authentication cookies to keep you logged in during your session.
- Session cookies to remember your preferences and filter settings within a session.
- Analytics data collected by base44 to understand Platform usage patterns.
We do not use advertising cookies or share data with advertising networks. You may disable cookies in your browser settings, but this may prevent some features of the Platform from functioning correctly.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted between your browser and the Platform.
- API keys and secrets stored as environment variables, never in application code.
- Payment data processed exclusively through PCI DSS-compliant Stripe infrastructure.
- Access to personal data limited to personnel who need it to operate the Platform.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately at edupexperience@gmail.com.
9. Children's Privacy
The Platform is intended for higher education professionals and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete such information promptly.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We will respond to privacy-related requests within 30 days of receipt.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date at the top. For significant changes, we will also send an email notification to registered users. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.