STEP Edges Privacy Policy

Thank you for joining STEP Edges. We at STEP Edges respect privacy and want users to understand how data is collected, used, and shared. This Privacy Policy covers data collection practices and describes rights regarding personal data.

Unless linked to a different policy or stated otherwise, this Privacy Policy applies when visiting or using STEP Edges websites, mobile applications, APIs, or related services (the “Services”). It also applies to prospective customers of business and enterprise products. For STEP Edges Business programs offered by employers, consult the STEP Edges Business Privacy Statement.

By using the Services, users agree to this Privacy Policy. Users may not use the Services if they do not agree with this Privacy Policy or any other agreement governing use of the Services.

• What Data We Get
• How We Get Data About You
• What We Use Your Data For
• Who We Share Your Data With
• Security
• Your Rights
• Jurisdiction-Specific Rules
• Updates & Contact Info

Certain data is collected directly, such as information entered by users, data about consumption of content, and data from third-party platforms connected with STEP Edges. Some data is collected automatically, such as information about devices and interactions with the Services. All data in this section is subject to processing activities including collecting, recording, structuring, storing, altering, retrieving, encrypting, pseudonymizing, erasing, combining, and transmitting.

1.1 Data You Provide to Us

Data collected varies by how the Services are used. Examples include:

• Account Data: To create and use an account (including instructor accounts), the Services collect and store email, password, account settings, and may collect phone number for authentication, occupation and skill interests, and for instructors, government ID, verification photo, date of birth, race/ethnicity, and phone number. A unique ID is assigned at account creation. Legal bases: Performance of contract; Legitimate interests (service provisioning, identity verification, fraud prevention and security, communication, advertising).
• Profile Data: Optional profile information such as photo, headline, biography, language, website link, social profiles, and country. Profile Data may be publicly viewable. Legal bases: Performance of contract; Legitimate interests (enhanced functionality, convey content source information).
• Shared Content: Public interactions or shared content, including uploading courses, reviews, Q&A, messages, photos, or other work. May be publicly viewable and shared per Terms of Use. Legal bases: Performance of contract; Legitimate interests (service provisioning, enhanced functionality, marketing).
• Learning Data: Courses, assignments, labs, workspaces, quizzes started/completed; purchases; subscriptions; certificates; badges; exchanges with instructors/TAs/students; and submissions. Legal bases: Performance of contract; Legitimate interests (service provisioning, enhanced functionality, fraud prevention and security).
• Student Payment Data: Name, billing address, ZIP code; payment details handled by payment processors. STEP Edges does not collect/store sensitive cardholder data. Legal bases: Performance of contract; Legal obligation; Legitimate interests (payment facilitation, fraud prevention and security, compliance).
• Instructor Payment Data: Payment account info (e.g., PayPal/Payoneer/Tipalti), address, ACH/wire info, and legally required tax information. STEP Edges does not store sensitive bank data. Legal bases: Performance of contract; Legal obligation; Legitimate interests (service provisioning, payment facilitation, fraud prevention and security, compliance).
• Data About Your Accounts on Other Services: If logging in via third-party platforms (e.g., social), information made available via APIs depends on platform settings and user choices. Data is also subject to the third party’s policies. Legal basis: Legitimate interests (identity verification, UX improvement).
• Promotions and Surveys: Data provided to participate in promotions/surveys (e.g., name, email, postal address, DOB, phone) used for administration, notifications, and rewards, possibly with public disclosure per rules. Legal bases: Performance of contract; Legitimate interests (administration, prize delivery, compliance).
• Communications and Support: Contact info, messages, and related data, including interactions through AI assistants, are used to respond and investigate. Legal basis: Legitimate interests (customer/technical support, fraud prevention and security).

The data above is stored and associated with the account. STEP Edges’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use.

1.2 Data We Collect through Automated Means

• System Data: IP address; device type; OS type/version; unique identifiers; browser; language; domain; and platform types. Legal bases: Performance of contract; Legitimate interests (service provisioning, support, fraud prevention and security, communication, product improvement, advertising).
• Usage Data: Interactions with the Services, pages visited, features used, search queries, click data, timestamps, referrers, and content accessed. Legal basis: Legitimate interests (service provisioning, UX improvement, product improvement, fraud prevention and security, advertising).
• Approximate Geographic Data: Country, city, coordinates inferred from IP. Legal bases: Legitimate interests (UX improvement, fraud prevention and security, compliance, advertising).

The above (“Cookie Data”) is gathered via server logs and tracking technologies, described in “Cookies and Data Collection Tools,” and is stored and associated with the account. Depending on settings, data may be transmitted to Google for advertising.

1.3 Data From Third Parties

For STEP Edges Business enterprise/corporate prospects, certain business contact information may be collected from third-party commercial sources.

Tools such as cookies, web beacons, and similar tracking technologies are used to gather data. Some tools allow opting out of collection.

2.1 Cookies and Data Collection Tools

Cookies are small text files stored by browsers to collect, store, and share activity data across websites, including STEP Edges. They help remember preferences (e.g., language) and improve usability. Clear pixels in emails may track deliverability and open rates.

STEP Edges and service providers (e.g., analytics and advertisers) use server logs and automated data collection tools like cookies, tags, scripts, customized links, device/browser fingerprints, and web beacons (“Data Collection Tools”). These track System Data, Usage Data, and Approximate Geographic Data. In some cases, this data is tied to other collected data.

2.2 Why We Use Data Collection Tools

• Strictly Necessary: Core access, login, security, and abuse prevention.
• Functional: Preferences and additional site functionality.
• Performance: Measurement, testing, and improvements.
• Advertising: Relevant ads based on usage and profiles, possibly using hashed emails and public content.
• Social Media: Social features and cross-site interest profiling by providers.

Browsers and devices can manage cookies; refusal may impair functionality. See “Your Choices About the Use of Your Data” for controls.

Data is used to provide Services, communicate, troubleshoot, secure against fraud/abuse, improve and analyze Services, serve personalized ads, and for legal or safety needs. Data is retained as needed for these purposes; after account termination, data is deleted or retained as required by law or for safety and integrity.

• Provide/administer Services, issue certificates, customize content, and facilitate communications.
• Process payments to instructors/third parties.
• Process requests/orders, confirm delivery, detect fraud/abuse, and enforce policies.
• Communicate about accounts, changes, progress, rewards programs, new services/features, promotions, newsletters, and push notifications (with opt-outs where applicable).
• Manage accounts/preferences and personalize experience.
• Facilitate technical functioning, troubleshooting, security, and fraud prevention.
• Verify instructor identity.
• Solicit feedback and market products/services/surveys/promotions and subscription plans.
• Link and analyze data with third-party providers; identify unique users across devices; tailor advertisements.
• Improve Services; develop new products/features, including AI usage consistent with Instructor GenAI Policy; inputs may be processed to respond, but personal data is not used to train/fine-tune GenAI models.
• Analyze trends/traffic; track purchases/usage; advertise on third-party sites and apps.
• As required or permitted by law; or as necessary for safety/integrity of users, employees, third parties, the public, or Services.

• With Your Instructors: Data (excluding email) to improve content and support, e.g., country, language, OS, device settings, referrer, enrollments, and reviews.
• With Other Students and Instructors: Depending on settings, Shared Content and profile data may be public; Q&A may show names.
• With Service Providers/Contractors/Agents: Payments, fraud prevention, analytics, marketing/ads, email/hosting, and support under direction and protection consistent with this policy.
• With STEP Edges Affiliates: Within corporate family to enable/support Services.
• With Business Partners: Distribution and traffic partners depending on location.
• With Credit-Granting Organizations: For continuing education requirements upon request.
• With Analytics and Enrichment Services: Contact or de-identified data for analytics or matching with public databases to improve communications and marketing.
• To Power Social Media Features: Providers may collect IP and page visited; governed by third-party policies.
• To Administer Promotions/Surveys: As needed or legally required by rules/filings.
• For Advertising: Cookie Data shared for targeted ads and analytics; opt-outs serve generic ads.
• Google as a Data Controller: Google Ads cookies for profiles and performance; opt-out via Google Ads settings.
• For Security and Legal Compliance: Disclosures for valid legal processes, to enforce agreements, prevent fraud/abuse, or protect rights/safety; audits/legal advisors as needed.
• During a Change in Control: Data may be shared or transferred during M&A, divestiture, dissolution, or asset sale.
• After Aggregation/De-identification: Disclosed or used for any purpose.
• With Your Permission: As consented outside this policy’s scope.

Links to third-party sites are governed by their privacy policies.

Appropriate security measures are applied based on data type/sensitivity to protect against unauthorized access, alteration, disclosure, or destruction. No system is 100% secure. Protect passwords and report suspected unauthorized access to Support promptly.

Users may have rights such as opting out of promotional emails, certain cookies, and third-party collection; updating or terminating accounts; and contacting for individual rights requests. Parents may request deletion of unintentionally collected data about underage children.

6.1 Your Choices About the Use of Your Data

• Choosing not to provide certain data may limit features.
• Opt out of promotional communications via unsubscribe links or account email preferences; transactional messages will continue.
• Cookie controls may be available (including regional settings links) and via device OS settings for tailored advertising.
• Opt-out resources may include industry programs (e.g., NAI/DAA), regional options (e.g., Your Online Choices in EEA, DAC in Japan), and provider controls (e.g., Google Ads Settings, Taboola opt-out, Google Analytics/Mixpanel/ZoomInfo/Clearbit tools).
• For questions about data or rights, contact: +91 9148915551

6.2 Accessing, Updating, and Deleting Your Personal Data

• Update or correct: Log into the account and update at any time.
• Delete: To terminate the account, students may use profile settings; instructors may follow dedicated steps. Contact Support if issues arise.
• Retention after termination: Some data may remain visible or retained for legitimate purposes, legal obligations, dispute resolution, and enforcement, in line with this policy.
• Access: Use the online form where available or email info@stepedges.com, or write to STEP Edges, Attn: Privacy/Legal Team, +91 9148915551. Responses may take up to one month; verification of identity may be required. Certain data may be retained for lawful bases, including records and transaction completion.

Additional rights or disclosures may apply based on local laws and regulations. Refer to Terms and any regional addenda published by STEP Edges for jurisdiction-specific requirements.

When material changes are made, users may be notified via email, in-product notices, or as required by law. Changes become effective on posting.

8.1 Modifications to This Privacy Policy

From time to time, this Privacy Policy may be updated. Material changes may be communicated via email, service notifications, or as required by applicable law. Unless stated otherwise, modifications are effective on posting. Continued use after the effective date constitutes acceptance of the revised Privacy Policy, which supersedes prior versions.

8.2 Interpretation

Capitalized terms not defined here have the meanings in STEP Edges Terms of Use. Non-English versions are for convenience; the English version controls in case of conflict.

8.3 Questions

For questions, concerns, or disputes regarding this Privacy Policy, contact the privacy team (including the Data Protection Officer) at info@stepedges.com, or send postal mail to STEP Edges.