Privacy Policy

CourseConnect is developed and operated by Alto Tech Services LLC ("Alto Tech", "we", "our", or "us"). This privacy policy explains how data is collected, used, and protected when you use the CourseConnect platform.

CourseConnect operates as a multi-tenant platform where organizations (such as RESAS and other training providers) manage their own courses, events, and user data. It's important to understand the distinction between data controlled by your organization and data processed by Alto Tech Services.

Organization Data (Controlled by Your Organization):

The following data is owned and controlled by the organization you belong to (e.g., RESAS), not Alto Tech Services:

• Course content, materials, and curricula
• Event schedules, registrations, and attendance records
• Certifications, grades, and assessment results
• Organization-specific user roles and permissions
• Payment and transaction records for courses/events
• Any content you submit within your organization's courses

Your organization determines how this data is used, retained, and shared. Contact your organization's administrator for questions about their specific data practices.

Alto Tech Services Profile Data:

Alto Tech Services only collects and processes minimal profile data necessary for platform functionality:

• Identity Data: Name, email address, profile photo (from Google OAuth)
• Authentication Data: Login credentials and session information
• Technical Data: IP address, browser type, device information for security purposes

This profile data enables your account to work across Alto Tech Services products (CourseConnect, and future applications) through our linked accounts feature.

We use your profile data exclusively for:

• Creating and managing your user account
• Authenticating your identity across Alto Tech products
• Sending essential service communications (password resets, security alerts)
• Providing technical support when you contact us
• Improving platform security and preventing fraud
• Complying with legal obligations

We do not use your data for advertising, marketing to third parties, or any purpose beyond operating the platform.

Alto Tech Services commits to never:

• Sell your personal information to any third party
• Share your data with advertisers or marketing companies
• Use your educational records for purposes unrelated to the platform
• Transfer your organization's data to competitors
• Mine your data for behavioral advertising

We use trusted third-party services to operate the platform:

• Supabase: Database hosting and authentication
• Google OAuth: Secure sign-in authentication
• Stripe: Payment processing (handled by your organization)
• Vercel: Application hosting
• Resend: Transactional email delivery

These services process data only as necessary to provide their specific functions and are bound by their own privacy policies and our data processing agreements.

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (HTTPS/TLS) and at rest
• Row-level security policies restricting data access
• Regular security audits and vulnerability assessments
• Secure authentication via Google OAuth
• Access controls limiting employee data access to business necessity

Organization Data: Retained according to your organization's policies. When an organization terminates their account, their data is deleted within 30 days unless legal retention requirements apply.

Profile Data: Retained while your account is active. You may request deletion at any time by contacting us.

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to certain processing activities
• Withdraw consent where applicable

To exercise these rights, contact us at privacy@altotechservices.com

We may update this privacy policy periodically. We will notify you of significant changes by email and/or a prominent notice on the platform. The "Last updated" date at the top indicates when the policy was last revised.

For privacy-related questions or concerns:

Alto Tech Services LLC
Email: privacy@altotechservices.com

For questions about your organization's data practices within CourseConnect, please contact your organization's administrator directly.