Privacy Policy
Last updated: April 2026
1. Information We Collect
We collect information you provide directly (name, email, payment details) and information generated by your use of the Platform (lesson progress, quiz scores, AI tutor conversations, XP activity). We do not sell your personal data.
2. How We Use Your Data
- Deliver course content and track your learning progress
- Process payments and issue certificates
- Send transactional emails (verification, receipts, password resets)
- Personalise course recommendations based on your onboarding preferences
- Power the AI Tutor and prompt lab features
- Improve the Platform through aggregated, anonymised analytics
3. Data Sharing
We share your data only with trusted third-party processors necessary to operate the Platform: Paystack and Stripe (payments), Mux (video delivery), AWS S3 (file storage), Resend (email), and Anthropic (AI features). Each processor is bound by data processing agreements.
4. Cookies & Local Storage
We use an HttpOnly cookie for authentication refresh tokens and localStorage for your session token. No third-party advertising trackers are used.
5. Your Rights
You have the right to access, correct, or delete your personal data. You may request account deletion at any time from your account settings or by emailing us. We will respond within 30 days.
6. Data Retention
We retain your data for as long as your account is active or as required by law. Anonymised analytics data may be retained indefinitely.
7. Security
We use industry-standard measures including TLS encryption in transit, bcrypt password hashing, and JWT-based authentication. No system is completely secure — if you believe your account has been compromised, contact us immediately.
8. Contact
Privacy questions or requests: privacy@cirostack.com.