Privacy Policy

1 Data We Collect

We collect the following types of personal data: Registration data (name, email, encrypted password); Profile data (photo, biography, area of expertise); Browsing data (pages visited, session time, device used); Progress data (courses accessed, lessons completed, assessment scores); Payment data (processed directly by Stripe - we do not store card data); Communication data (messages in discussions, course reviews).

2 How We Use Your Data

We use your personal data to: provide and maintain the platform services; personalize your learning experience; process payments and enrollments; send communications about courses and platform updates; generate completion certificates; improve our services through statistical analysis; prevent fraud and ensure platform security; comply with legal and regulatory obligations.

3 Data Sharing

We do not sell your personal data. We may share your information with: instructors of courses you are enrolled in (name and progress); payment processors (Stripe) for financial transactions; infrastructure providers (hosting, CDN) for platform operation; competent authorities when required by law. All third parties with whom we share data are subject to confidentiality and data protection agreements.

4 Cookies and Tracking Technologies

We use cookies and similar technologies to: keep your session active and preferences (theme, language); analyze platform usage for improvements; remember your progress in courses; ensure the security of your access. You can manage cookie preferences in your browser settings. Disabling essential cookies may affect platform functionality.

5 Data Security

We implement technical and organizational measures to protect your data, including: data encryption in transit (HTTPS/TLS) and at rest; passwords stored with bcrypt hash; access tokens with automatic expiration; monitoring of suspicious activities; regular encrypted backups; role-based access control (RBAC). Despite our efforts, no system is 100% secure. In the event of a security incident, we will notify affected users as required by applicable law.

6 Your Rights

In accordance with data protection laws, you have the right to: confirm the existence of data processing; access your personal data; correct incomplete or outdated data; request anonymization or deletion of unnecessary data; request data portability; be informed about data sharing; revoke consent at any time. To exercise your rights, access your profile settings or contact us.

7 Data Retention

We keep your personal data for as long as necessary to fulfill the purposes described in this policy. Account data is maintained while your account is active. After account deletion, we maintain financial data for 5 years in accordance with tax legislation. Issued certificates are maintained permanently for verification purposes. Anonymized browsing data may be maintained indefinitely for statistical analysis.

8 Children's Privacy

The EURECAS platform is intended for users aged 16 and older. Minors between 16 and 18 years old may use the platform with authorization from parents or legal guardians. We do not knowingly collect data from children under 16. If we identify that we have collected data from a minor without appropriate consent, we will take steps to delete that information.

9 Changes to this Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable legislation. Significant changes will be communicated by email or notification on the platform. The date of the last update will always be indicated at the top of this page. We recommend reviewing this policy regularly.