Coursfy använder nödvändiga cookies och lagring i webbläsaren för att driva webbplatsen. De valfria kategorierna är avstängda tills du slår på dem: analys slår på felövervakning, och marknadsföring och analys över enheter laddar ingenting i dag. Du kan acceptera alla, avvisa icke-nödvändiga eller hantera varje kategori. AI- och röstbehandling ställs in under Integritetsinställningar. Integritetspolicy · Cookiepolicy
Senast uppdaterad: juni 2026
Denna sida dokumenterar lagliga grunder enligt GDPR Artikel 6 och standardperioder för lagring av Coursfys behandlingsaktiviteter.
Coursfy är ansvarig för konsumentkonton. Akademiägare är ansvariga för medlemsdata; Coursfy är personuppgiftsbiträde enligt DPA.
Tillgång, rättelse, radering, begränsning, portabilitet och invändning — via Inställningar → Integritet eller privacy@coursfy.com.
| Aktivitet | Uppgiftskategorier | Rättslig grund | Gallring |
|---|---|---|---|
| Account registration & authentication | Name, email, password hash, IP, user agent | Contract (Art. 6(1)(b)) — necessary to provide the service | Until account deletion + 30 days operational backup |
| Academy membership & course enrolment | Profile, progress, payment references | Contract (Art. 6(1)(b)) | Duration of membership + statutory accounting periods |
| Payment processing | Billing metadata via Stripe; no full PAN on Coursfy | Contract + legal obligation (tax/accounting) | Per Stripe and local accounting law (typically 7 years for invoices) |
| Marketing newsletter | Email, consent timestamp | Consent (Art. 6(1)(a)) — withdraw anytime | Until unsubscribe or 24 months inactivity |
| Analytics / error monitoring (Sentry) | Pseudonymous events, scrubbed stack traces | Consent (Art. 6(1)(a)) | 90 days default Sentry retention |
| AI assistant (academy/course) | Questions, answers, optional conversation IDs | Consent for personalization; contract for core Q&A when enabled by academy | Per academy settings; default 12 months conversation logs |
| Security & audit logs | User ID, action type, timestamp, IP (hashed where possible) | Legitimate interest (Art. 6(1)(f)) — security of processing | 12 months rolling (see retention policy) |
| Kategori | Period | Åtgärd |
|---|---|---|
| Active user account | While account is active | Full profile and content access |
| Deleted user account | 30 days after erasure request | Hard delete or anonymize PII; backups expire per cycle |
| Consent preferences | 3 years after last update | Proof of consent for regulatory requests |
| Security / access audit logs | 12 months | Append-only store; then aggregate or delete |
| Payment & invoice records | 7 years (or local statutory minimum) | Anonymize where possible after legal hold ends |
| Marketing contacts | Until unsubscribe + 30 days | Remove from mailing lists |
| AI conversation logs | 12 months default | Academy owners may request shorter window |
| Server/application logs | 90 days | PII redacted at ingestion |
Senast uppdaterad: juni 2026
Denna sida dokumenterar lagliga grunder enligt GDPR Artikel 6 och standardperioder för lagring av Coursfys behandlingsaktiviteter.
Coursfy är ansvarig för konsumentkonton. Akademiägare är ansvariga för medlemsdata; Coursfy är personuppgiftsbiträde enligt DPA.
Tillgång, rättelse, radering, begränsning, portabilitet och invändning — via Inställningar → Integritet eller privacy@coursfy.com.
| Aktivitet | Uppgiftskategorier | Rättslig grund | Gallring |
|---|---|---|---|
| Account registration & authentication | Name, email, password hash, IP, user agent | Contract (Art. 6(1)(b)) — necessary to provide the service | Until account deletion + 30 days operational backup |
| Academy membership & course enrolment | Profile, progress, payment references | Contract (Art. 6(1)(b)) | Duration of membership + statutory accounting periods |
| Payment processing | Billing metadata via Stripe; no full PAN on Coursfy | Contract + legal obligation (tax/accounting) | Per Stripe and local accounting law (typically 7 years for invoices) |
| Marketing newsletter | Email, consent timestamp | Consent (Art. 6(1)(a)) — withdraw anytime | Until unsubscribe or 24 months inactivity |
| Analytics / error monitoring (Sentry) | Pseudonymous events, scrubbed stack traces | Consent (Art. 6(1)(a)) | 90 days default Sentry retention |
| AI assistant (academy/course) | Questions, answers, optional conversation IDs | Consent for personalization; contract for core Q&A when enabled by academy | Per academy settings; default 12 months conversation logs |
| Security & audit logs | User ID, action type, timestamp, IP (hashed where possible) | Legitimate interest (Art. 6(1)(f)) — security of processing | 12 months rolling (see retention policy) |
| Kategori | Period | Åtgärd |
|---|---|---|
| Active user account | While account is active | Full profile and content access |
| Deleted user account | 30 days after erasure request | Hard delete or anonymize PII; backups expire per cycle |
| Consent preferences | 3 years after last update | Proof of consent for regulatory requests |
| Security / access audit logs | 12 months | Append-only store; then aggregate or delete |
| Payment & invoice records | 7 years (or local statutory minimum) | Anonymize where possible after legal hold ends |
| Marketing contacts | Until unsubscribe + 30 days | Remove from mailing lists |
| AI conversation logs | 12 months default | Academy owners may request shorter window |
| Server/application logs | 90 days | PII redacted at ingestion |