Privacy policy

1. Data controller

The data controller for this platform is Edgedemy, company registration number [COMPANY REGISTRATION NUMBER - NOT YET SET], registered at [REGISTERED ADDRESS - NOT YET SET]. For privacy or data processing questions, use the contact details at the end of this policy.

2. Data we collect

We collect account data such as name, email, password technical data, role, locale, email verification and terms acceptance timestamps. If you sign in with Google, we receive your Google account ID, name, email address, verified-email status, and profile image URL when provided. We also store started courses, lesson progress, course completion, quiz attempts and answers, scores, mistake-tag based recommendations, course reviews, platform feedback/contact messages, request metadata such as IP address and user agent for contact submissions, activity/security logs, and technical error data when Sentry is configured.

3. How we use data

We use data to create accounts, ensure sign-in, remember language and access-gate state, display learning progress, calculate quiz results and recommendations, publish real course reviews, collect beta/platform feedback, provide support, maintain security, diagnose errors, and fulfill legal obligations.

4. Payments and payment partners

Paid course subscriptions may be processed through external payment partners, including Paysera. The platform stores only the payment status, course, price, period, and subscription data needed for access, accounting, and customer support. Full card or bank details are not stored on the platform when handled by the payment partner.

5. Learning activity data

The platform stores manually started courses, lesson and course progress, completion status, quiz attempts, selected answers, results, mistake-tag signals, related recommendations, course reviews, and other data needed for the learning flow.

6. Cookies and analytics

Edgedemy currently uses only necessary cookies and similar session storage for sign-in, CSRF protection, language preference, and the private access gate. We do not currently load analytics or marketing cookies. If analytics or marketing tools are added later, they must not load before consent where consent is required.

7. Visitor counts

We count how many people are using the platform, so that we can see whether it is growing. We record only that a browser session was active, and whether it was signed in — never who. These counts contain no account details, no IP address, no browser details and no page addresses, and we cannot trace an entry back to a person. Each session is given a random identifier so that it is counted once a day rather than once per page; those entries are deleted automatically after 48 hours. Only the daily totals — a date and two numbers — are kept after that.

8. Data retention period

We keep data as long as needed for the account, course access, learning progress, security, and legal obligations. When data is no longer needed, it is removed or anonymized, except where longer retention is required by law.

9. Data sharing with third parties

We do not sell personal data and we do not share it for advertising. It is shared only with the service providers below, each of which processes it on our instructions and only as far as their service requires. Analytics and marketing providers are not currently used at all.

Paysera

Payment processing for course subscriptions. Paysera receives the details needed to take the payment and returns the result. Full card and bank details are handled by Paysera and are never stored on this platform.

Resend

Delivery of transactional email: account verification, password resets, payment receipts, subscription notices and replies to your enquiries. Receives your email address and the content of those messages.

Google

Sign in with Google, and only if you choose it. When you do, we receive your Google account ID, name, email address, whether that address is verified, and your profile image URL when provided. Not used if you register with an email address and password.

Sentry

Error monitoring, when configured. Receives technical diagnostics about failures: the error, the page it happened on, and the account identifier where one is attached. It is configured not to send personal data from request contents.

Bunny Stream

Hosting and delivery of course video. Receives the technical data needed to serve a video to your browser, such as your IP address, as any video host must.

Anthropic

The AI mentor debrief on chart-replay practice. One request is sent per completed practice session, and it contains that session only: your score and result, the trade you planned with its entry, stop and target, which concepts you identified or missed, the first 400 characters of the reasoning you wrote, and the course content of the exercise itself. It does NOT contain your name, email address, user ID, IP address, avatar or account age; it contains no subscription or payment data; and it contains no history of your previous sessions, so no request builds a profile of you over time. Only the debrief text that comes back is stored, and it is shown to you. The prompt itself is never stored or logged. The feature is switched off entirely when no Anthropic key is configured, and practice runs created by course authors previewing their own exercises are never sent.

DigitalOcean

Servers and infrastructure. Holds the application database and file storage, which means it holds, at rest, all of the data described in this policy.

10. User rights

Under applicable data protection laws, users may have the right to access their data, correct it, delete it, restrict processing, object to processing, receive a copy of their data, or withdraw consent when processing is based on consent. Users may also contact the State Data Protection Inspectorate.

11. How to contact about data

For privacy, data processing, or exercising your rights, you can contact via the contact page.

By email: support [at] edgedemy [dot] com