1. Who we are and what this covers
Cohort, also called Cohort Labs, is an independently operated platform at cohortlabs.app and its subdomains. This policy explains how the operator of Cohort handles information about website visitors, organisers and students. For questions or privacy requests, contact irshatharis@gmail.com.
We decide how information is used to operate accounts, secure the service and provide support. When an organiser collects student information through Cohort for their programme, we process it to provide the service to that organiser. The organiser is responsible for their own purposes and privacy notices. Contact them about their programme or use of your information; we can help route a request when needed.
2. Information we collect
- Account information, such as an organiser’s name, email address, sign-in credentials and session records. Password authentication uses a password hash rather than a readable password.
- If you choose Google sign-in, basic profile information provided by Google, such as your name, email address, profile image when supplied, and identifiers or tokens needed to authenticate your account. We do not request access to Gmail, Google Drive or Google Contacts.
- Programme information, including public page content, dates, prices, venue details, payment instructions and settings submitted by the organiser.
- Registration information submitted by a student or entered by an organiser, including name, email, contact details, selected dates and answers to registration questions.
- Payment records, such as the amount, currency, reported payment reference, status and confirmation or refund history. External payment providers handle payment account details on their own services.
- Technical and support information, such as IP address, browser and device details, request times, error and security logs, and information you send when contacting us.
Only provide information needed for the programme or service. Do not put sensitive personal information into public page content.
3. Why we use information
We use information to create and authenticate accounts, publish programme pages, manage registrations, record payments, maintain reliable records, provide support, prevent abuse and meet legal obligations. Public programme content is visible to anyone who visits its page. Registration details are available to the relevant organiser.
Where a legal basis is required, we rely on performing our agreement with you for account and service delivery, legitimate interests for security, fraud prevention and service reliability, legal obligations for required records, and consent where the law requires it. An organiser is responsible for establishing the appropriate basis for their student data, including any sensitive information they request.
6. How long information is kept
We keep account and programme information for as long as it is needed to provide the service. Registration and payment history may need to remain available for the organiser’s records, disputes, fraud prevention or legal obligations. Technical and support data is kept only while it remains needed for its operational purpose.
Retention depends on the type of record, whether the account or programme is active, applicable legal requirements and any unresolved dispute. Deleting an account may not immediately remove records required for these purposes or copies awaiting routine backup replacement. Contact irshatharis@gmail.com to request deletion or ask about retention of a specific record.
7. Security and international processing
We use HTTPS, account authentication and access controls to protect information. No system is completely secure. Keep your login and private registration or payment links confidential, and tell us if you suspect a security issue.
Our infrastructure providers operate internationally, so information may be processed outside your country, where privacy laws can differ. Where applicable law requires safeguards for an international transfer, those requirements apply to our use of the provider.
8. Your choices and rights
Depending on where you live, you may have rights to access or receive a copy of your information, correct it, request deletion, restrict or object to certain uses, and withdraw consent for processing based on consent. Withdrawing consent does not affect earlier lawful processing. Some requests are subject to legal exceptions or recordkeeping obligations.
Email irshatharis@gmail.com with your request. We may need to verify your identity. For student information controlled by an organiser, contact that organiser first, or ask us to help identify them. We aim to respond within the period required by applicable law. You may also complain to your local data protection authority.
9. Children
Organiser accounts are intended for adults aged 18 or over. Cohort is not directed at children. An organiser offering a programme to minors must arrange appropriate parent or guardian involvement and comply with applicable requirements before collecting a child’s information. If you believe information about a child was submitted improperly, contact us.
10. Updates and contact
We may update this policy as the service or its providers change. We will publish the revised date here and provide notice of material changes through the service or by email where practical.
For privacy questions, account closure or a data request, write to irshatharis@gmail.com.