Udemy Privacy Policy

This document is Udemy's Privacy Policy, governing the collection, use, storage, and sharing of personal data by Udemy Inc. and its affiliates in connection with the Udemy platform, mobile applications, and related services, with legal bases including consent, contractual necessity, and legitimate interests depending on jurisdiction. The policy states that Udemy collects account registration data, payment information, course activity and progress data, device and usage data, and communications content, and the terms authorize sharing of personal data with instructors, corporate clients (Udemy Business), third-party service providers, advertising partners, and successors in the event of a merger or acquisition. A notable operational distinction is the policy's dual-mode structure: consumer learners and Udemy Business enterprise users operate under materially different data-sharing frameworks, with enterprise learner data shared with the employing organization, which may create exposure that individual users do not anticipate. The policy engages GDPR and the EU-U.S. Data Privacy Framework for European users, CCPA/CPRA for California residents, and FERPA considerations for educational data contexts; applicable law may constrain some of the policy's broader data-use assertions, particularly around cross-context behavioral advertising and data sharing with enterprise clients.