Privacy Policy Courses Hub

Last updated: August 3, 2026

This Privacy Policy describes how OtheRiver (“we,” “us,” or “our”), operated by Alex Marcone and based in Teramo, Italy, collects, uses, shares, and protects information in connection with the Courses Hub application (“Courses Hub” or the “App”).

Courses Hub enables merchants to create, manage, and sell online courses and digital content, provide customers with a personal learning area, and offer an installable web app.

1. Who This Policy Applies To

This Privacy Policy applies to:

  • Merchants and authorized staff members who install or use Courses Hub.
  • Customers and students who access courses, digital content, or the installable web app provided by a merchant.
  • Visitors who interact with pages and features generated by Courses Hub.

For customer and student information, the merchant generally acts as the data controller and OtheRiver processes the information on the merchant’s behalf. OtheRiver acts as data controller for information required to operate, secure, and support the App.

2. Information We Collect

2.1 Merchant and Store Information

When a merchant installs or uses Courses Hub, we may collect:

  • Store domain and store identifier.
  • Merchant or staff member name and email address, when available.
  • Language and locale preferences.
  • Authentication credentials and access tokens.
  • App settings, branding preferences, and configuration data.
  • Support communications and technical troubleshooting information.
  • Subscription and billing status, where applicable.

2.2 Course and Product Information

To provide the App’s functionality, we may process:

  • Product and variant identifiers.
  • Product titles, descriptions, handles, prices, images, and publication status.
  • Course titles, descriptions, categories, sections, and lessons.
  • Video, audio, document, download, and external resource URLs.
  • Free previews and free content.
  • Course access settings and publication preferences.
  • Branding, colors, logos, and Academy configuration.
  • Discount and publication information where configured by the merchant.

2.3 Customer and Student Information

When a customer purchases or accesses a course, we may process:

  • Customer identifier.
  • Name and email address.
  • Order identifier and order reference.
  • Purchased products, variants, and courses.
  • Purchase date and course access status.
  • Learning progress or completion information, where supported.
  • Profile image or avatar, when uploaded.
  • Login dates, active sessions, and authentication records.
  • Notification and content preferences.

Courses Hub does not collect or store customers’ complete payment card details. Payments and checkout transactions are processed through the merchant’s ecommerce platform.

2.4 Authentication Information

Courses Hub may use passwordless login links or one-time verification codes. We may process:

  • Email address.
  • Hashed authentication tokens or verification codes.
  • Token expiration and usage status.
  • Session identifiers.
  • Login and session timestamps.

Authentication codes and links expire after a limited period. Essential session cookies may remain active for up to 30 days unless the user logs out or clears browser data.

2.5 Technical Information

Our hosting and infrastructure providers may temporarily process technical information needed to deliver and secure the service, including:

  • IP address.
  • Browser and device information.
  • Request timestamps.
  • Error and security logs.
  • Pages or endpoints requested.

We do not use this information to create advertising profiles.

3. How We Use Information

We use information to:

  • Authenticate merchants, customers, and students.
  • Operate Courses Hub and its embedded administration interface.
  • Create, organize, publish, and display courses and lessons.
  • Connect courses with products and completed purchases.
  • Provide customers with access to purchased and free content.
  • Operate the personal Academy area and installable web app.
  • Track course access and learning progress where supported.
  • Send login codes, access links, service messages, and enabled notifications.
  • Personalize the Academy using the merchant’s branding.
  • Provide customer support and troubleshoot technical problems.
  • Protect the App against abuse, fraud, and unauthorized access.
  • Improve reliability, security, and performance.
  • Comply with legal obligations and platform requirements.

We do not sell personal information or use it for third-party advertising.

4. Artificial Intelligence Features

Courses Hub may offer optional artificial intelligence features for generating or improving course descriptions and organizing imported course content.

When a merchant actively uses these features, relevant course titles, descriptions, lesson names, or imported content may be sent to OpenAI for processing.

Merchants should not submit unnecessary personal, confidential, or sensitive information through AI features. Customer order data, payment information, and authentication credentials are not intentionally sent to OpenAI for these purposes.

5. Cookies and Local Storage

Courses Hub uses essential cookies to:

  • Maintain authenticated sessions.
  • Protect account access.
  • Keep customers signed in to their Academy.
  • Support security and basic App functionality.

The web app may also use local browser storage to remember preferences, such as notification or offline-content settings.

Courses Hub does not use advertising cookies or third-party marketing trackers.

6. Third-Party Services

We may use the following service providers to operate Courses Hub:

  • Shopify: installation, authentication, store data, products, orders, customers, checkout, files, and platform functionality.
  • Railway: application hosting, infrastructure, and database services.
  • Resend: delivery of login codes, access links, and service-related emails.
  • OpenAI: optional AI-assisted course content processing initiated by the merchant.
  • YouTube or Vimeo: playback of videos embedded or linked by the merchant.

These providers may process information according to their own privacy policies and contractual obligations. We only share information that is reasonably necessary to provide the relevant functionality.

7. Legal Bases for Processing

Where the General Data Protection Regulation applies, we process personal information based on one or more of the following:

  • Performance of a contract.
  • The merchant’s instructions as data controller.
  • Our legitimate interests in operating, securing, and improving the App.
  • Consent, where required.
  • Compliance with legal obligations.

Merchants are responsible for establishing an appropriate legal basis for collecting and using their customers’ information through Courses Hub.

8. Data Retention

Merchant configuration, course content, and related App data may be retained while the merchant uses Courses Hub.

Customer and order-related information is retained only for as long as reasonably necessary to provide course access, operate the App, comply with legal obligations, resolve disputes, and protect the service.

After the App is uninstalled or a valid deletion request is received, relevant information may be deleted or anonymized, unless retention is required for legal, security, fraud-prevention, or backup purposes.

Residual copies may remain temporarily in protected backups until they are deleted through normal backup rotation.

9. International Data Transfers

Some service providers may process information outside Italy or the European Economic Area.

Where required, we rely on appropriate safeguards, such as adequacy decisions, contractual protections, or Standard Contractual Clauses.

10. Data Security

We use reasonable technical and organizational safeguards to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures include encrypted HTTPS connections, restricted access, secure authentication, hashed login credentials, and infrastructure security controls.

No system or method of electronic transmission is completely secure, and absolute security cannot be guaranteed.

11. Privacy Rights

Depending on applicable law, individuals may have the right to:

  • Request access to their personal information.
  • Request correction of inaccurate information.
  • Request deletion of their information.
  • Restrict or object to certain processing.
  • Request data portability.
  • Withdraw consent where processing is based on consent.
  • Submit a complaint to a competent data protection authority.

Customers and students should normally submit requests to the merchant from whom they purchased or received the course. Merchants may then forward the request to us where our assistance is required.

Requests can also be sent to apps@otheriver.com. We may need to verify the requester’s identity before responding.

12. Merchant Responsibilities

Merchants are responsible for:

  • Providing appropriate privacy notices to their customers.
  • Ensuring that course content and uploaded files are lawful.
  • Obtaining any consent required for notifications or marketing communications.
  • Responding to customer privacy requests as data controller.
  • Configuring Courses Hub in accordance with applicable privacy, consumer protection, and ecommerce laws.
  • Avoiding the submission of unnecessary personal or sensitive data through AI features.

13. Children’s Information

Courses Hub is a business service intended for merchants and is not specifically directed at children.

If a merchant provides courses to minors, the merchant is responsible for obtaining any required parental consent and complying with applicable child privacy laws.

14. Privacy and Compliance Requests

Courses Hub is designed to respond to applicable data access and deletion requests received through Shopify’s privacy and compliance processes.

Where legally permitted, requested personal information will be provided, deleted, or anonymized within the applicable timeframe.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes to Courses Hub, our service providers, or applicable legal requirements.

Changes will be indicated by updating the “Last updated” date. Material changes may also be communicated through the App or by email where appropriate.

16. Contact

For questions or privacy-related requests, contact:

OtheRiver — Alex Marcone
Teramo, Italy
Email: apps@otheriver.com