Legal
Privacy Notice
Last updated: April 25, 2026
This notice explains how LiftedLesson ("we") collects and uses personal data. We act as the data controller for the personal data we process about you.
What we collect
- Account data: name, email, password hash, school, profile photo, bio
- Content: lessons you upload, generate, post, comment, or share
- Usage: pages visited, features used, device type, IP address
- Communications: support messages, survey replies
Payment data (card number, billing address) is collected and processed by our payment provider, Paddle. We never see or store your full card details.
Why we use it
- To create and run your account (legal basis: contract performance)
- To provide the service, including lesson conversion and AI generation (contract)
- To improve the product (legitimate interests)
- To detect fraud and abuse (legitimate interests, legal obligation)
- To send transactional emails (contract) and product updates (consent or legitimate interest, with opt-out)
Who we share with
- Service providers: hosting, analytics, customer support, AI inference providers — under contract, only as needed to run the service
- Paddle, our Merchant of Record, for payments, subscription management, tax compliance, and invoicing
- Authorities, where required by law
- A buyer, in the event of a merger or acquisition (with notice)
We do not sell your personal data.
How long we keep it
We keep account data while your account is active and for up to 12 months after deletion to allow account recovery and dispute resolution. Backups roll off on a 90-day schedule. Anonymized usage data may be retained indefinitely.
International transfers
We're based in the United States. If you access LiftedLesson from outside the US, your data is transferred to the US and processed under standard contractual clauses or other lawful safeguards where required.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your data, to object to certain processing, and to withdraw consent. EU/UK residents may also lodge a complaint with their supervisory authority. To exercise any right, email privacy@liftedlesson.com. We respond within 30 days.
Security
We use industry-standard technical and organizational measures: TLS in transit, encryption at rest, access controls, audit logs, principle of least privilege.
Cookies
We use essential cookies to keep you signed in and a small number of analytics cookies to understand how the product is used. You can manage cookie preferences in your browser. We don't use marketing cookies for ad targeting.
Contact
Questions? Email privacy@liftedlesson.com.
See also: Terms