Information Sharing & Disclosure Policy

1. Introduction & Commitment

At EduVerse, we believe that trust is the foundation of effective learning. This Information Sharing & Disclosure Policy explains how we handle, share, and disclose information related to our students, instructors, corporate partners, and educational content.

We are committed to complying with global data protection regulations, including GDPR, CCPA, FERPA, and COPPA, ensuring that your information is shared only when necessary, with consent, and in accordance with the law.

2. Internal Information Sharing

Information is shared within EduVerse only on a need-to-know basis to provide, maintain, and improve our educational services.

• Instructors & Mentors: Course progress, assignments, and feedback data are shared with instructors to facilitate teaching and grading.
• Customer Support: Account information may be accessed by support agents to resolve technical or billing issues.
• Product & Research Teams: Aggregated, anonymized learning analytics are used to improve course content and platform functionality.
• Access Controls: Role-based access controls (RBAC) are enforced to ensure employees can only view data relevant to their duties.

3. Sharing with Third-Party Service Providers

We engage trusted third-party vendors to help us operate our platform. These providers are contractually obligated to protect your data and use it only for specified purposes.

• Cloud Hosting & Infrastructure: Amazon Web Services (AWS) and Stripe for secure data storage and processing.
• Payment Processors: Transaction data is shared with Stripe and PayPal to process payments securely. We do not store full credit card details.
• Communication Services: SendGrid and Twilio for sending emails, SMS notifications, and verification codes.
• Analytics Providers: Google Analytics and Mixpanel for understanding platform usage trends (data is anonymized where possible).

4. Educational Partners & Employers

As an EdTech platform, we collaborate with universities, training institutions, and corporate employers. Data sharing in these contexts is governed by explicit agreements.

University & Accreditation Partners

When you enroll in a course accredited by a partner institution, we may share:

• Completion records and grades for certificate issuance.
• Verification data for academic credit transfer.

Corporate Training Programs

For enterprise clients using EduVerse for employee training:

• Employers may view aggregate team progress and individual completion status as configured in the admin dashboard.
• Personal data is never shared with employers without employee consent, except as required for employment verification.

Certificate Verification

EduVerse issues verifiable digital credentials. We may disclose verification data to prospective employers or institutions when they request proof of your certification via our verification portal.

5. Legal Disclosures & Regulatory Compliance

We may disclose personal information when required by law or to protect EduVerse and its users.

• Law Enforcement: We respond to subpoenas, court orders, or legal processes only when legally compelled. We strive to notify affected users unless prohibited by law.
• Safety & Security: Information may be shared to investigate potential fraud, abuse, or threats to the safety of our community.
• Regulatory Reporting: As an educational provider, we may report data to accreditation bodies, tax authorities, or educational regulators as required.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as a business asset, with continued commitment to privacy.

6. Aggregated & Anonymized Data

We may share aggregated, de-identified data that cannot be reasonably linked back to an individual. This includes:

• Learning trend reports for industry research.
• Market analysis data shared with potential investors.
• Public success stories and case studies (only with explicit written consent).

7. Your Rights & Choices

You have control over how your information is shared. Depending on your location, you may have the right to:

• Access & Portability: Request a copy of your data and transfer it to another service.
• Correction: Update or correct inaccurate information.
• Deletion: Request deletion of your account and associated data, subject to legal retention requirements.
• Opt-Out: Control marketing communications and third-party analytics via your account settings.
• Restriction: Limit how we process your data under certain circumstances.

To exercise these rights, visit your Account Privacy Dashboard or contact our Data Protection Officer.

8. Data Security Measures

While we share information only as described above, we implement robust security measures to protect data in transit and at rest:

• End-to-end encryption (TLS 1.3) for all data transmission.
• AES-256 encryption for sensitive data storage.
• Regular penetration testing and third-party security audits.
• Multi-factor authentication (MFA) for administrative access.

9. Policy Updates

We may update this policy to reflect changes in our practices, technology, or legal requirements. Significant changes will be communicated via email or platform notification. We encourage you to review this page periodically.

10. Contact Us

If you have questions about our information sharing practices, wish to exercise your rights, or need to report a concern, please contact us: