Privacy Policy

Who we are

Datavora provides educational services. This policy explains how we collect, process, and safeguard the limited personal data required to deliver access and support your journey.

Data we collect

• Account details: name, email address, authentication identifiers, and profile information you provide during registration.
• Billing metadata: transaction records handled securely by our payment processors (we never store full card data or CVV codes).
• Progress telemetry: module progress, completed lessons, quiz scores, achievement timestamps, and learning patterns.
• Support correspondence: email conversations, support tickets, and questionnaires you choose to share with us.
• Technical signals: IP address, user agent, device type, browser information, and crash logs to keep the platform stable and secure.
• Optional data: survey responses, feedback forms, and community posts if you choose to participate.

How we use the data

• Content delivery: provision access, track your progress, and unlock achievements and certificates.
• Communication: send operational updates (reminders, new announcements, security alerts).
• Support: provide technical support, answer questions, and resolve issues you request help with.
• Improvement: analyze anonymized patterns and engagement data to improve content relevance and identify areas needing clarification.
• Security: detect fraud, prevent unauthorized access, and maintain platform integrity.
• Legal compliance: meet legal and financial obligations such as invoicing, tax compliance, and regulatory requirements.

We do not sell, rent, or trade your personal data. Limited third-party processors (payment providers, email infrastructure, analytics) act on our behalf under written data protection agreements.

Cookies & tracking

We use essential cookies for authentication, session continuity, and security. We also use privacy-respecting analytics to understand which lessons need additional clarity and improve user experience. You may disable non-essential cookies in your browser settings; critical platform features will continue to function.

• Essential cookies: required for login, access, and security features.
• Analytics cookies: help us understand how you use the platform to improve content and navigation.
• Preference cookies: remember your settings such as language and display preferences.

Data retention

Data is retained while you have an active account so you can revisit content and track progress. Upon account closure or deletion:

• Personal identifiers are removed within 30 days.
• Aggregated, anonymized metrics may be preserved for quality improvement.
• Legal records (transactions, compliance data) are retained as required by law.
• You can request immediate data deletion at any time through your account settings or by contacting us.

Data security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS 1.3) and at rest (AES-256).
• Access limited to Datavora staff under least-privilege controls and multi-factor authentication.
• Regular security audits and penetration testing.
• Secure payment processing via PCI DSS compliant providers.
• Automatic backups with disaster recovery procedures.

International data transfers

We operate globally and may use infrastructure hosted in various regions. Whenever data leaves the EEA or other protected jurisdictions, we rely on standard contractual clauses, GDPR-compliant frameworks, or equivalent safeguards to maintain appropriate data protection levels.

Your rights

Depending on your location, you may have the following rights:

• Access: request a copy of all personal data we hold about you.
• Deletion: request deletion of your personal data (with exceptions for legal requirements).
• Correction: update or correct inaccurate information in your account.
• Portability: export your data (progress, certificates) in a machine-readable format.
• Opt-out: unsubscribe from non-essential marketing emails via the unsubscribe link.
• Restriction: limit how we process your data in certain circumstances.

We respond to verified requests within 30 days, subject to applicable law and verification requirements.

Children’s privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it immediately.

Data sharing and sub-processors

We only share data with trusted service providers who help us deliver and improve the Academy. These include secure hosting, payment processing, email delivery, customer support, and analytics platforms. Each provider acts under a written agreement that limits how they may use your data and requires them to protect it at least as carefully as we do.

• Payment processors: handle billing and transaction records; we do not see full card numbers or CVV.
• Learning platform host: stores account, progress, and content access data.
• Email & messaging: delivers account updates, reminders, and support responses.
• Analytics: helps us understand feature usage using aggregated, privacy-respecting telemetry.

We do not sell personal data to advertisers, data brokers, or any other third party. If Datavora is ever involved in a merger, acquisition, or sale of assets, we will notify you before your data is transferred to a successor organization.

Changes to this policy

We may update this Privacy Policy as our services evolve or as legal requirements change. Material changes will be communicated by email and through a prominent notice on the platform at least 30 days before they take effect. Continued use of the Academy after the effective date constitutes acceptance of the revised policy.

Contact

Questions or requests about this policy? Email [email protected] or reach us through the Contact page. We review privacy-related inquiries on business days (Mon–Fri, 09:00–18:00 UTC) and respond within 5 business days.