Privacy Policy
CanopyLAB ("TeacherLAB", "we", "our") provides TeacherLAB and related services. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit our websites, create an account, or interact with our learning tools.
If you represent an institution, you are responsible for any notices and consents required for your end users.
Who we are & contact details
Controller: CanopyLAB
Email: info@canopylab.com
Data we collect
Information you provide:
Account info (name, email, password, role, institution, profile photo).
Content you create/upload (posts, assignments, comments, files).
Billing details (payment method, billing address) processed by our payment processor (we do not store full card numbers).
Certificate details (name as it should appear on the certificate, course title, issuance date).
Support requests and survey responses.
Information we collect automatically:
Usage and device data (pages viewed, features used, IP address, device IDs, browser type, time zone, language).
Cookies, SDKs, and similar technologies (see Cookie Policy).
Information from third parties:
Single sign‑on providers (e.g., Google/Microsoft), video platforms, analytics, or your institution.
Special categories/sensitive data: We do not seek to collect sensitive personal data. Do not submit such data unless strictly necessary and permitted by law and by your institution’s policies.
Why we process data (purposes & legal bases)
We use personal data to:
Provide, secure, and maintain the Service (performance of contract / legitimate interests).
Create and manage accounts, authenticate users, and provide support (contract).
Process payments and billing (contract / legal obligations).
Issue and manage course completion certificates (performance of contract).
Personalize experiences, recommend content, and improve features (legitimate interests/consent where required).
Communicate with you about updates, security alerts, and administrative messages (contract / legal obligations).
Send optional marketing communications (consent or legitimate interests with opt‑out, as required by law).
Comply with legal obligations and enforce our Terms (legal obligations / legitimate interests).
AI‑assisted features & data use
If you use AI‑powered features, we may process inputs and outputs to deliver the feature, ensure safety, and improve quality. Where feasible, we de‑identify or aggregate data. You can opt out of certain improvement uses by contacting us at info@canopylab.com or via in‑product settings, where available. We do not sell personal data.
Cookies & tracking
We use cookies and similar technologies for core functionality, analytics, personalization, and marketing as described in our Cookie Policy. Where required, we request your consent via a cookie banner with granular controls.
Sharing your data
We may share data with:
Service providers/processors (hosting, analytics, email, customer support, payment processing). We require appropriate data protection terms.
Institutional administrators (if your account is managed by an institution).
Legal and compliance recipients where required by law or to protect rights and safety.
Business transfers in connection with a merger, acquisition, or asset sale are subject to appropriate safeguards.
We do not sell personal data. We do not share personal data with third parties for their independent direct marketing without consent.
International transfers
We may transfer data across borders. When we do, we use recognized transfer mechanisms such as adequacy decisions, Standard Contractual Clauses (SCCs), UK Addendum, or other lawful tools. Details are available upon request.
Data retention
We retain personal data only as long as necessary for the purposes above, to comply with legal obligations, or to resolve disputes. Default retention periods: [e.g., account data retained while account is active; support tickets up to 24 months; analytics up to 26 months]. We will delete or anonymize data when no longer needed.
Security
We implement technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and regular security reviews. No system is 100% secure; please use a strong, unique password and enable available security features.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object, port data, or withdraw consent. You may also have the right to lodge a complaint with your supervisory authority.
How to exercise your rights: Email info@canopylab.com with your request. We may verify your identity and respond within the timeframe required by law.
Children’s privacy
TeacherLAB is intended for educators and adult learners. We do not knowingly collect personal data from children under 13 (or a higher age where local law sets it). If we learn that a child has provided personal data without appropriate consent, we will delete it.
Local disclosures
EU/UK GDPR: Legal bases listed above; EU/UK residents can contact their data protection authority.
California (CPRA): We do not sell or share personal information as defined by CPRA for cross‑context behavioral advertising. Residents may exercise rights to know, delete, correct, and opt out of sharing. We honor browser‑based opt‑out signals where required.
Changes to this policy
We will update this Privacy Policy from time to time. Material changes will be communicated via email or in‑app notice. Continued use indicates acceptance of the updated policy.
Contact us: info@canopylab.com