Privacy Policy

1. Information We Collect

When you register, we collect your name, email address, and optionally an ID number for certificate issuance. Payment details are processed securely by Stripe and never stored on our servers.

2. How We Use Your Data

Account management — authenticating you and personalising your dashboard
Learning records — tracking course progress, quiz scores, and certificate eligibility
Invoicing — generating invoices and receipts for your purchases
Communication — sending transactional emails (invoices, certificates, access reminders)

3. Data Retention

Learner records are retained permanently (soft-delete only, per our platform specification). You may request a full JSON export of your data at any time from your Profile > Privacy & Data page.

4. Data Sharing

We do not sell your data. Data is shared only with:

Payment processor (Stripe) — for payment processing
Email provider (Resend) — for transactional emails
Cloud infrastructure (Neon, Cloudinary) — for database hosting and media storage

5. Your Rights

You have the right to:

Access — download a full export of your personal data
Rectification — update your name, email, or certificate name via your profile
Deactivation — request account deactivation (records preserved per regulatory requirements)
Portability — receive your data in JSON format

6. Cookies

We use essential cookies for authentication (session token) and language/currency preferences. No tracking or advertising cookies are used.

7. Security

All data is transmitted over HTTPS. Passwords are hashed with bcrypt. Login attempts are rate-limited (10 per minute).

8. GDPR & PDPA Compliance

This platform is designed to comply with the EU General Data Protection Regulation (GDPR) and Singapore Personal Data Protection Act (PDPA). For data protection enquiries, contact the Academy Admin.

9. Changes to This Policy

We may update this policy periodically. The version displayed on this page is the current and binding version.