Skip to content

Legal

Privacy notice

TrustMyCourse collects personal information from creators who ask for a course to be reviewed, and from the review that follows. This page explains exactly where it enters, what it is used for and who else handles it.

Last updated 4 September 2026

Who is responsible

Operated by
Tadeáš Plachý, Czech sole trader (OSVČ)
Address
Chatařská 21, Havířov - Dolní Suchá, 735 64, Czech Republic
IČO
21909369

What we collect

When you submit a course through our submission form, we collect the details you enter: your name, your email address, the course name, the course website, the provider or company name, the category you choose, how the course could be reviewed, and any optional message (up to 2000 characters). We also record the date and time the submission was made.

If the review goes ahead, you may send us more through the secure continuation link we email you. Depending on how the course is reviewed, that can include instructions for reaching the course, temporary access credentials you choose to provide, or evidence from people who bought the course. Anything you send there is part of the review record.

We also hold the email correspondence about a review, in the ordinary way any business holds the email it exchanges with the people it works with.

Everything above is stored in our production database, together with the operational record of the review itself, such as when it was opened, what was checked and what was decided.

We do not use cookies for advertising or analytics, we run no tracking scripts, and we do not build a profile of visitors. Browsing the site does not require you to give us anything. No payment is taken for a review at present, so we hold no payment details and use no payment processor.

Why we collect it

To assess whether the course is suitable for review, to carry out that review, and to reply to you about it. That is the only purpose. We do not send marketing, we do not run a newsletter, and we do not sell or share submission details for anyone else’s purposes.

Your name and email are used to correspond with you. The course details are used to assess the submission. If a course is verified, the resulting public profile describes the course. It does not publish your personal contact details.

Who else processes it

Some of what you send us is handled by service providers acting on our instructions. Each is listed by the role it performs and the provider currently used for it, so you can see what it actually receives rather than only who it is:

  • Website and application hosting, currently Vercel, which processes the requests that carry anything you send us, including the form submission itself.
  • Database infrastructure, currently Neon, where your submission and the operational record of its review are stored.
  • Transactional email delivery, currently Resend, used to send you the automated messages the review process generates, such as a secure continuation link or the result of a review.
  • Business and review correspondence, currently Google Workspace, where email you exchange with us about a review is received and kept.

These providers act on our instructions and only for the purposes above. None of them receives anything beyond what its role requires, and none is used to profile you or to market to you. If we change a provider we will update this list.

How long we keep it

Different material is kept for different lengths of time, because it is held for different reasons. These are maximum periods, not targets:

  • Temporary access credentials. Where you give us a login or similar credential so a course can be reviewed, we remove it within 30 days of the review decision, and sooner if you ask. If you withdraw or invalidate a credential yourself, it stops being usable immediately whatever we hold.
  • Buyer evidence. Evidence from people who bought a course is kept for 24 months from the review decision, so a decision that is later questioned can still be examined against what it was based on.
  • Submission and contact details. Kept for 36 months from our last contact with you, which covers renewals and any follow-up about the course.
  • Review correspondence. Email exchanged with you about a review is kept for 36 months.
  • Internal review notes. Our own working notes and the record of what evidence a decision rested on are kept for the life of the verification and 24 months after it, because a decision has to remain explainable for longer than it remains current.

We keep material for less time than the periods above whenever it is no longer needed, or when you ask us to delete it and no legal or operational reason requires us to keep it. Where we do have to keep something you have asked us to delete, we will tell you why.

The public verification record for a course is kept indefinitely. A verification only means something because the reviews before it stay visible, so a renewed or expired review remains part of the course’s public history. That record describes the course: it does not publish your name, your email address or anything else you sent us.

Your choices

You can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. Email hello@trustmycourse.com and we will deal with it. If you are unhappy with how we have handled a request, you may be able to complain to the data protection authority where you live.

Changes

If this notice changes materially, the date at the top of the page changes with it. This page is written to describe what the service actually does today, not what it might do later.