EFFECTIVE REPLACE_WITH_LEGAL_EFFECTIVE_DATE
Privacy notice
This notice explains the account, learning, community, support, and commerce data used to operate the platform.
1. Data we process
We process verified identity details, purchase and entitlement records, profile preferences, course progress, assignments, notes, community activity, event reservations, support requests, operational audit records, and limited payment-event metadata. Card numbers and security codes remain with the payment provider.
2. Why we use it
Data is used to authenticate members, deliver purchased access, preserve work, operate cohorts and support, prevent abuse, reconcile payments, meet legal obligations, and improve reliability. We do not sell member personal data.
3. Legal bases
Depending on context, processing is necessary to perform the service contract, comply with law, protect legitimate interests such as security and fraud prevention, or act on consent for optional visibility and communications.
4. Service providers
Infrastructure, identity, payment, email, video, analytics, and support providers process limited data under their own safeguards and contracts. The production provider list must be available from support on request.
5. Retention
Records are retained only as long as needed for the service, security, accounting, dispute resolution, or legal requirements. Different records have different periods. Deletion requests may not remove records that must be retained by law or are necessary to protect other users.
6. Your choices and rights
You can update profile and privacy preferences in the platform. Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection, and may complain to your data-protection authority. Identity verification is required before fulfilling sensitive requests.
7. Security and international processing
We use access controls, owner-scoped records, encryption in transit, audit trails, and service-provider safeguards. No system is risk-free. Providers may process data outside your country using an applicable transfer mechanism.
8. Cookies
Strictly necessary identity and session technologies keep accounts signed in and protect requests. Any optional analytics or marketing technology must not be enabled until the required notice and consent controls are configured.