← Back to Home

    Privacy Policy

    Last updated: October 25, 2025

    1. Introduction

    Fiscedge Academy™ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

    2. Data Controller

    Fiscedge Academy is the data controller responsible for your personal data. For data protection inquiries, contact us at: info@fiscedge.com. For certified legal communications, use: legal@pec.fiscedge.com

    3. Information We Collect

    3.1 Personal Information

    • Account Data: Name, email address, password (encrypted)
    • Payment Information: Processed securely by Stripe (we do not store credit card details)
    • Profile Data: Learning preferences, course progress, quiz scores
    • Communication Data: Support requests, feedback, correspondence

    3.2 Automatically Collected Information

    • Usage Data: Course views, lesson completion, time spent
    • Technical Data: IP address, browser type, device information
    • Analytics Data: Page visits, click patterns, navigation paths

    4. Legal Basis and Purpose

    Contract Performance (GDPR Art. 6(1)(b))

    Processing necessary to provide course access, process payments, and deliver services you've purchased.

    Legitimate Interests (GDPR Art. 6(1)(f))

    Improving our Platform, preventing fraud, analyzing usage patterns, and enhancing user experience.

    Consent (GDPR Art. 6(1)(a))

    Marketing communications, non-essential cookies, and optional features requiring explicit consent.

    Legal Obligation (GDPR Art. 6(1)(c))

    Compliance with tax laws, financial regulations, and law enforcement requests.

    5. How We Use Your Data

    • Provide and maintain course access and Platform functionality
    • Process payments and manage your account
    • Track learning progress and issue certificates
    • Send transactional emails (purchase confirmations, password resets)
    • Provide customer support and respond to inquiries
    • Improve course content and Platform features
    • Prevent fraud and ensure Platform security
    • Send marketing communications (with your consent, opt-out available)
    • Comply with legal obligations and enforce our Terms

    6. Data Sharing and Third Parties

    We share your data only with trusted service providers necessary to operate our Platform:

    Supabase (Database & Auth)

    Stores user accounts, course data, and progress. EU-hosted servers.

    Stripe (Payment Processing)

    Processes payments securely. PCI-DSS compliant. We do not store card details.

    Email Service Provider

    Sends transactional and marketing emails (with your consent).

    We do not sell your personal data to third parties. All service providers are bound by data processing agreements.

    7. International Data Transfers

    Your data is primarily stored on servers within the European Union. When data is transferred outside the EU (e.g., to Stripe in the US), we ensure adequate safeguards through Standard Contractual Clauses (SCCs) and compliance with the EU-US Data Privacy Framework.

    8. Data Retention

    • Account Data: Retained while your account is active, plus 90 days after deletion request
    • Course Progress: Stored indefinitely for lifetime access unless you request deletion
    • Payment Records: Retained for 7 years for tax and legal compliance
    • Analytics Data: Aggregated and anonymized after 24 months
    • Support Communications: Retained for 3 years for quality assurance

    9. Your GDPR Rights

    Under the GDPR, you have the following rights regarding your personal data:

    Right of Access: Request a copy of your personal data
    Right to Rectification: Correct inaccurate or incomplete data
    Right to Erasure: Request deletion of your data ("right to be forgotten")
    Right to Restriction: Limit how we use your data
    Right to Data Portability: Receive your data in a structured, machine-readable format
    Right to Object: Object to processing based on legitimate interests
    Right to Withdraw Consent: Withdraw consent for marketing or optional processing

    To exercise any of these rights, contact us at info@fiscedge.com or, for certified legal communications, legal@pec.fiscedge.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

    10. Right to Erasure (Art. 17 GDPR)

    Under Article 17 of the GDPR, you have the right to request the deletion of your personal data ("right to be forgotten"). You can exercise this right in two ways:

    Self-service (immediate):

    Go to your Profile page and scroll to the Danger Zone section. Click "Delete My Account" and follow the confirmation steps. This will permanently delete your account, all learning progress, enrollments, and certificates.

    By email (within 30 days):

    Send a deletion request to info@fiscedge.com with the subject line "Account Deletion Request". We will process your request within 30 days as required by GDPR.

    Note: Payment records may be retained for up to 7 years to comply with tax and legal obligations, even after account deletion.

    11. Cookies and Tracking

    We use cookies and similar technologies to enhance your experience. For detailed information, see our Cookie Policy.

    • Essential Cookies: Required for login, security, and basic functionality
    • Analytics Cookies: Help us understand usage patterns (with consent)
    • Marketing Cookies: Track conversions and ad effectiveness (with consent)

    12. Data Security

    We implement industry-standard security measures to protect your data:

    • Encryption in transit (HTTPS/TLS) and at rest
    • Password hashing with bcrypt
    • Regular security audits and vulnerability assessments
    • Access controls and role-based permissions
    • Automated backups and disaster recovery procedures

    13. Children's Privacy

    Our Platform is not intended for users under 16 years old. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us immediately for deletion.

    14. Changes to This Policy

    We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on the Platform. The "Last updated" date at the top reflects the latest revision.

    15. Contact & Data Protection Officer

    For privacy-related questions or to exercise your GDPR rights, contact:
    Email: info@fiscedge.com
    Certified Legal Email (PEC): legal@pec.fiscedge.com
    Data Protection Officer: info@fiscedge.com
    Response Time: Within 30 days as required by GDPR