Privacy Policy
Last updated: August 7, 2026
The privacy of your data, and of the people your organization trains, matters to us. In this policy we explain what we collect, why we collect it, and what we do and do not do with it. We never sell your data and we never show ads.
Who we are
learn.place is a learning management system. When we say "we", we mean the operators of learn.place. You can always reach us at hello@learn.place.
One distinction matters throughout this policy. For your account and for visits to this website, we decide how data is processed (we act as the data controller). For the content inside your learn spaces, such as courses, exam answers and learner records, your organization decides and we only process it to run the service (we act as the data processor). If you are a learner in an organization's learn space, that organization is your first point of contact for privacy requests.
What we collect and why
Account information. When you sign up we ask for your name, your email address and the address you pick for your learn space. We use these to create your account, sign you in and send you service email. Sign-in can also go through Google or Microsoft; in that case we receive your name and email from them, nothing more.
Customer content. Courses, lessons, exams, answers, certificates and learner records belong to your organization. We store and process them solely to provide the service: to run the exams, issue the certificates, send the reminders your automations define.
Service email and SMS. We send transactional messages such as invitations, reminders and certificates. Service email includes delivery and open tracking so your organization's admins can see whether a message arrived and was opened.
Technical logs. Our servers keep short-lived logs (IP address, browser type, requested page) for security and troubleshooting.
Website analytics. This marketing site uses Google Analytics, which sets cookies to give us aggregate visitor statistics. The product itself does not carry advertising trackers.
AI features
AI features in learn.place run on your organization's own provider account: your admin adds their own OpenAI or Anthropic key, and prompts are sent directly under that key with a budget cap your admin sets. We log usage and cost for your organization's own dashboard. We do not use your content to train models, and we have no AI provider relationship of our own behind your back.
Where your data lives
learn.place runs on servers in the European Union (Hetzner, Germany and Finland), with Cloudflare in front for security and delivery. Backups are encrypted and stored separately from the primary systems.
Subprocessors
We use a small set of vendors to run the service, and only for the purpose listed: Cloudflare (security, content delivery), Hetzner (hosting, EU), Resend (service email delivery), Twilio (SMS, only if your organization enables it), Google Analytics (this website only). AI providers are not our subprocessors: they are engaged by your organization with its own keys.
Your rights
You can access, correct, export or delete your personal data. Email hello@learn.place and we will act on the request; where GDPR or Turkey's KVKK gives you specific rights, we honor them. If your data lives inside an organization's learn space, we will route the request to that organization, since the data is theirs to control.
When you delete your account, we delete your personal data from live systems promptly and from backups as they rotate. Certificate verification records are an exception: the fact that a certificate was issued, and whether it was revoked, is retained so that verification keeps working.
Security
Data is encrypted in transit and at rest. Access inside the product is role-based, so people only reach the learn spaces they belong to. If you believe you have found a security problem, write to hello@learn.place and we will respond quickly.
Children
Accounts on learn.place are created by organizations. Where an organization trains minors, for example a school, obtaining the required consents from parents or guardians is that organization's responsibility as the data controller.
Changes
If we change this policy in a meaningful way, we will update the date at the top and, for significant changes, notify account owners by email. Questions are always welcome at hello@learn.place.
Adapted from the Basecamp open-source policies / CC BY 4.0.