Privacy Notice
Last updated: 22 October 2026
Who is responsible
Velychko Nataliia Valeriivna (FOP), 1A Litynska Street, apt. 68, Kyiv 02092, Ukraine, is the controller of personal data processed by Scormate Course Builder. Contact: kashmensky@gmail.com.
What we collect and why
- Account data — your Scormate account identifier and workspace, to sign you in and keep your courses apart from other users'. Your email address is managed by your Scormate account at scormate.com, which sends notices about your courses. With every signed-in request, scormate.com also tells us your verified email address. We do not store it; we use it only when you open a checkout, passing it to Paddle to identify you as their customer, so that checkout can offer a card you chose to save.
- Content — the documents you upload and the courses you create, to generate, store and export your courses.
- Usage and technical data — logs of requests, generation runs and their costs, to operate, secure and improve the Service.
- Purchase data — when you buy, we send Paddle your verified email address, and Paddle tells us the transaction, its status and the course it is for. We never receive or store your card details.
We process this data to perform our contract with you and for our legitimate interest in running a secure service. We do not sell personal data or use your content to train AI models.
Who processes it for us
- Cloudflare — hosting, storage and Workers AI models.
- OpenAI — AI course generation from your documents.
- Paddle.com — checkout, payments, invoices and saved payment methods, as Merchant of Record; it receives your email address when you open a checkout.
- Scormate (scormate.com) — sign-in and notification emails.
These providers may process data outside your country, including in the United States, under their own safeguards for international transfers.
How long we keep it
Courses, uploaded documents and their generation records are kept until you delete the course or ask us to delete your data. Temporary files are removed within a day and deletion records after 30 days. A count of the generations each workspace has started is kept after a course is deleted, to apply beta limits. Purchase records are kept as long as accounting law requires.
Your rights
You can ask us to access, correct, export or delete your personal data, or object to its processing, by writing to kashmensky@gmail.com. You can also complain to your local data protection authority.