← Back to home

Privacy Policy

Last updated: March 22, 2026

1. Information We Collect

When you use Cursus, we collect the following information:

  • Account information: Email address and password (or OAuth provider identity for Google/LinkedIn sign-in).
  • Company profile: Company name, industry, ARR range, team size, and other intake questionnaire responses you provide.
  • Generated content: Playbook sections, audit reports, lab configurations, and other content created through the platform.
  • Uploaded documents: Files you upload for analysis (PDF, DOCX, TXT).
  • Usage data: Token consumption, feature usage, and interaction patterns for service improvement.

2. How We Use Your Information

We use your information to:

  • Provide and improve the Cursus platform and its AI-powered features.
  • Generate personalized playbook content calibrated to your company context.
  • Monitor usage against plan limits and prevent abuse.
  • Send transactional communications (account updates, usage alerts).
  • Diagnose technical issues and improve platform reliability.

3. AI Processing

Your company profile and content are processed by third-party AI models (Anthropic Claude, OpenAI embeddings) to generate playbook content and recommendations. We do not use your data to train AI models. Your content is processed in real-time and not retained by AI providers beyond the request lifecycle.

4. Data Storage and Security

Your data is stored in Supabase (PostgreSQL) with row-level security ensuring you can only access your own data. All data is encrypted in transit (TLS) and at rest. We use Sentry for error monitoring, which may process anonymized error data.

5. Data Sharing

We do not sell your data. We share data only with:

  • AI providers: Anthropic and OpenAI for content generation (processed, not stored).
  • Infrastructure providers: Supabase (database), Vercel (frontend hosting), Render (backend hosting).
  • Analytics: PostHog for product analytics (anonymized usage patterns).
  • Integrations you authorize: Slack, Notion, Confluence (only when you explicitly connect).

6. Your Rights

You have the right to:

  • Access: View all data associated with your account.
  • Delete: Permanently delete your account and all associated data from the Settings page.
  • Export: Download your playbook content in Markdown, DOCX, or PDF formats.
  • Rectify: Update your company profile at any time through the intake form.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data is permanently removed from our systems. Soft-deleted items (playbooks, uploads) are permanently purged upon account deletion.

8. Contact

For privacy-related inquiries, contact us at privacy@cursuslabs.com.