Privacy Policy
Effective date: . This policy describes how GrowCraft Academy handles personal data.
Data We Collect
We collect information you provide and information generated while you use the platform, including:
- Account information (name, email, password hash, billing address if provided).
- Course and learning data (progress, completion, quiz results, assignments submitted).
- Support communications (messages you send to support, feedback, survey responses).
- Payments (payment status and transaction metadata; card details are processed by payment providers and are not stored on our servers).
- Technical logs (IP address, device identifiers, browser type, pages viewed, timestamps, approximate location derived from IP).
Our services are not directed to children under 13 (or the age required by local law). If you believe a child provided personal data, contact us and we will take appropriate steps.
How We Use Data
We use personal data to operate the platform and provide services, including:
- Creating and managing accounts, enabling course access, and maintaining your learning history.
- Processing purchases, subscriptions, and refunds (through providers).
- Providing customer support and responding to inquiries.
- Improving content quality and platform reliability (analytics, debugging, performance monitoring).
- Communicating updates, security notices, and administrative messages.
- Complying with legal obligations and enforcing our terms.
Legal Bases (GDPR)
Where the GDPR applies, we process personal data under one or more of the following bases:
To provide services you requested (account, courses, billing administration).
To secure and improve the platform, prevent fraud, and understand product usage.
For optional cookies and certain marketing preferences, where required.
For compliance obligations (e.g., tax, accounting, and lawful requests).
Data Retention
We retain data for as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements.
Account data remains while your account is active; some records may be kept longer where required.
Your Rights
Depending on your location, you may have rights regarding your personal data, including:
- Access to the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure (deletion) in certain cases.
- Restriction or objection to processing in certain cases.
- Portability to receive data in a structured, commonly used format.
- Opt-out of certain targeted advertising where applicable.
Security
We use technical and organizational measures designed to protect personal data, including encryption in transit, access controls, least-privilege practices, monitoring, and incident response procedures.
Use a unique password and enable security features on your email account, since email is commonly used for account recovery.
Contact
If you have questions or want to exercise your rights, contact us: