Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information: Name, email address, and password when you create an account
• Payment information: Payment method and transaction details when you purchase a module or program
• Usage data: Pages visited, modules accessed, lesson progress, and time spent on the platform
• Device information: Browser type, operating system, and device type for compatibility and security purposes
• Communications: Content of messages you send to us via contact forms or support channels

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our educational services
• Process transactions and send related information, including purchase confirmations and invoices
• Track your learning progress and provide personalized recommendations
• Respond to your comments, questions, and support requests
• Monitor and analyze trends to improve user experience
• Detect, investigate, and prevent fraudulent or unauthorized activities
• Comply with legal obligations

3. Data Storage and Security

Your data is stored securely using industry-standard encryption (AES-256) both in transit (TLS 1.3) and at rest. We use Supabase (hosted on AWS) as our database provider, which maintains SOC 2 Type II compliance.

We implement appropriate technical and organizational measures to protect your personal data. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

4. Cookies and Tracking

We use essential cookies to maintain your session (authentication, shopping cart) and optional analytics cookies to understand how users interact with our platform. You can disable non-essential cookies through your browser settings.

• Essential cookies: Required for login, security, and shopping cart functionality
• Analytics cookies: Help us understand usage patterns to improve the platform
• Preference cookies: Remember your settings (theme, language preferences)

5. Third-Party Services

We may share limited data with trusted third-party service providers that help us operate our platform:

• Supabase: Database and authentication services
• Stripe: Payment processing (if applicable)
• Vercel: Hosting and deployment services

These providers are contractually obligated to protect your data and are prohibited from using it for their own purposes.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict the processing of your data
• Data portability (receive your data in a structured format)
• Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at support@cxoacademy.co.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain it longer (e.g., financial records).

8. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

• Email: support@cxoacademy.co