Privacy Notice

1. Who we are

Corpus Learn is operated by Gript Technologies LLC ("Gript Technologies", "we", "us"), trading as Corpus Learn. Gript Technologies LLC is the data controller for personal data processed through corpuslearn.com and the Corpus Learn application. You can reach us at aurel.iuga@gript.io.

2. Personal data we collect

• Account data — name, email address, login credentials (stored hashed), industry and role selected during onboarding.
• Service content — course and brief requests, scoping answers, documents you upload as source material, quiz and flashcard responses, progress records.
• Team data — email addresses you provide when inviting teammates to a retainer seat.
• Support and correspondence — messages you send us and our replies.
• Usage and technical data — pages viewed, feature interactions, approximate location derived from IP address (city/country level), device and browser information, log data.
• Billing records — plan, purchase and subscription status, and transaction identifiers. Card and payment details are collected and processed by our Merchant of Record, Paddle, and are never stored by us.

3. Why we use it, and our legal basis

• Creating and administering your account, and providing the briefs, audio, notes and assessments you request — performance of a contract.
• Producing and reviewing requested briefs from your scoping answers and uploaded sources — performance of a contract.
• Managing entitlements, seats, quotas and billing status — performance of a contract.
• Security, fraud prevention, abuse monitoring and service integrity — legitimate interests.
• Product analytics and improvement, including aggregate usage and approximate visitor location — legitimate interests.
• Customer support and service notifications — performance of a contract / legitimate interests.
• Marketing emails, where sent — consent, withdrawable at any time via the unsubscribe link.
• Tax, accounting and legal record-keeping — legal obligation.

4. Who we share data with

• Merchant of Record — Paddle.com Market Ltd, which handles the sale of our products, subscription management, payments, invoicing, tax compliance and related buyer support.
• Service providers / subprocessors — cloud hosting and database providers, email delivery providers, AI model and speech-synthesis providers used to produce brief narration and notes, and analytics tooling. These providers act on our instructions under contract.
• Professional advisers — legal, accounting and audit advisers where necessary.
• Authorities — where required by law, regulation or valid legal process, or to protect our rights.

We do not sell personal data.

5. International transfers

We are based in the United States and our providers may process data in the United States and other countries. Where personal data is transferred from the UK or EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant) or an applicable adequacy decision.

6. Retention

We keep account and service content for as long as your account is active, and for up to 24 months after closure so we can restore access, resolve disputes and honour deliverables. Billing and tax records are kept for the period required by law (generally seven years). Logs and usage data are kept for up to 24 months. When data is no longer needed it is deleted or irreversibly anonymised.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to receive a portable copy, and to withdraw consent where processing relies on it. UK/EEA residents may also complain to their supervisory authority. To exercise a right, email aurel.iuga@gript.io; we respond within one month. We will not discriminate against you for exercising your rights.

8. Security

We apply appropriate technical and organisational measures, including encryption in transit, encryption at rest with our hosting provider, row-level access controls, least-privilege administrative access and audit logging. No system is perfectly secure, but we work to protect your data and will notify you and any regulator where required if a breach affects you.

9. Cookies and similar technologies

We use strictly necessary cookies and local storage to keep you signed in and to remember interface preferences, and limited analytics storage to understand aggregate usage. We do not run advertising cookies. You can clear or block cookies in your browser settings; strictly necessary storage is required for sign-in to work.

10. Children

Corpus Learn is a business product and is not directed to children under 16. We do not knowingly collect their personal data.

11. Changes

We will update this notice when our practices change and will revise the date above. Material changes will be communicated by email or in-app notice.