Privacy Policy

1. Introduction

Cool English LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and educational services (collectively, the "Service").

By using Cool English Music at music.coolenglish.org, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

Personal Information You Provide

• Account Information: Name, email address, and password when you create an account
• Payment Information: Billing address and payment details (processed securely through Stripe; we do not store full credit card numbers)
• Profile Information: Any additional information you choose to provide, such as profile picture or teaching preferences
• Communication Data: Messages you send us through contact forms or support requests

Information Automatically Collected

• Usage Data: Activities accessed, time spent, completion status, and preferences
• Device Information: IP address, browser type, operating system, and device identifiers
• Log Data: Access times, pages viewed, and referring website addresses
• Cookies and Similar Technologies: See our Cookie Policy below for details

Information from Third Parties

• Authentication Services: If you sign in using Google or other third-party services, we receive basic profile information
• Payment Processors: Transaction confirmation and subscription status from Stripe

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: Provide access to activities and manage your account
• Payment Processing: Process subscriptions and maintain billing records
• Communication: Send account notifications, updates, and respond to inquiries
• Personalization: Remember your preferences and customize your experience
• Improvement: Analyze usage patterns to improve our activities and features
• Security: Detect and prevent fraud, abuse, and technical issues
• Legal Compliance: Fulfill legal obligations and enforce our Terms of Service
• Marketing: Send promotional materials (you can opt-out at any time)

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

• AWS (Amazon Web Services): Cloud hosting and data storage
• Stripe: Payment processing and subscription management
• Amazon SES: Email delivery services
• CloudFront: Content delivery network for activity hosting

Team Subscriptions

If you join a team subscription, your email address and name may be visible to the team administrator. Team administrators can see member lists but cannot access individual usage data.

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as subpoenas, court orders, or government demands.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will provide notice before your information becomes subject to a different privacy policy.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption of data in transit using HTTPS/TLS
• Secure authentication using AWS Cognito
• PCI-DSS compliant payment processing through Stripe
• Regular security audits and monitoring
• Access controls and authentication for all systems
• Regular backups and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and personal data
• Data Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your personal data
• Restriction: Request restriction of processing your personal data
• Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, contact us at support@coolenglish.org. We will respond within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and collect usage information:

• Essential Cookies: Required for authentication and security
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use our Service
• CloudFront Signed Cookies: Provide secure access to premium activities

You can control cookies through your browser settings, but disabling essential cookies may limit your ability to use certain features.

8. Children's Privacy

Cool English Music is designed for use by educators and adult learners. While students may access activities through teacher-provided share links, we do not knowingly collect personal information from children under 13 without verifiable parental consent.

Share links provide temporary access to specific activities without requiring student accounts. If you believe we have collected personal information from a child under 13, please contact us immediately at support@coolenglish.org.

9. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

By using our Service, you consent to the transfer of your information to countries outside your country of residence, including the United States, which may have different data protection rules.

10. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account Data: Retained until you delete your account or request deletion
• Payment Records: Retained for 7 years for tax and accounting purposes
• Usage Data: Retained for 2 years for analytics purposes
• Marketing Communications: Retained until you unsubscribe

After the retention period, we securely delete or anonymize your personal information.

11. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending an email notification (for significant changes)

Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the rights listed in Section 6. Our legal basis for processing your data includes:

• Contract: Processing necessary to perform our contract with you
• Consent: You have given consent for specific purposes
• Legitimate Interests: Processing necessary for our legitimate business interests
• Legal Obligation: Processing required by law

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: