Privacy Policy

Alton Teaches LLC ("we," "us," or "our") operates this learning platform (the "Service"). This Privacy Policy governs the manner in which we collect, use, maintain, and disclose information collected from users of the Service.

By using the Service, you agree to the terms of this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

This summary is provided for convenience only and does not replace or supersede the full Privacy Policy below.

• We collect your name, email, and learning activity when you create an account, enroll, or purchase. Payment processing is handled by Stripe under PCI-DSS standards; we never see your full card number.
• Accounts use email-verified passwords. We store passwords only in securely hashed form, through our authentication provider.
• To prevent fraud and abuse we record the network (IP) address a code redemption came from, and the address of your most recent sign-in. Both are kept for as long as your account exists and are deleted with it.
• Email marketing happens only with your consent, and you may unsubscribe at any time. Transactional email (verification, purchase confirmations) is part of operating the Service.
• We do not sell your personal information. We share data only with the service providers necessary to operate the Service.
• Your rights: GDPR and CCPA rights available - contact [email protected].

Account and enrollment information: when you create an account, enroll in a course, redeem an access code, or make a purchase, we collect the personal information you give us, such as your name and email address, and where applicable your billing information (handled by our payment processor). We also collect information about your course enrollment, learning progress, quiz and exam attempts, certificates, and interactions within the Service, such as questions you post.

Automatically collected information: while using the Service, we automatically collect certain information through server logs and standard web technologies, including your computer’s Internet Protocol (IP) address, browser type and version, the pages you visit, the time and date of your visit, and device information. This data is used to maintain security, analyze usage, improve the Service, and troubleshoot technical issues.

Access-code redemption records: when you redeem an access code, we record the IP address the redemption came from, alongside the redemption itself. This record exists to detect and prevent fraud and abuse of promotional codes (for example, many accounts redeeming from one place), is visible only to the site operator, and is retained for as long as your account exists, because it is evidence about that specific redemption. It is deleted when your account is deleted. This is in addition to the standard server logs described above.

Sign-in records: we record the IP address and time of your most recent successful sign-in. This exists to help us investigate account sharing and unauthorised access, is visible only to the site operator, and is likewise retained for as long as your account exists and deleted with it.

Email marketing: with your permission, we may send you emails about our courses, new products, updates, and educational content related to your learning interests.

We may collect and use your personal information for the following purposes:

• To provide, operate, and maintain the Service;
• To create and secure your account, verify your email address, and authenticate you;
• To process your enrollments, purchases, and access-code redemptions;
• To record and display your learning progress, attempts, and certificates;
• To improve customer service and respond to your support requests;
• To send transactional emails, including email verification, password reset, and purchase confirmations, which are necessary for the operation of the Service;
• To send periodic marketing emails, only with your consent;
• To detect and prevent fraud and abuse, including promotional-code abuse and account sharing, using the redemption and sign-in IP records described in Section 1;
• To analyze usage patterns and improve the Service; and
• To comply with legal obligations.

How do you get my consent? When you provide us with personal information to create an account, enroll, make a purchase, redeem an access code, or subscribe to our mailing list, you consent to our collection and use of it for that specific purpose only.

How do I withdraw my consent? If after you opt in, you change your mind, you may withdraw your consent at any time by unsubscribing from emails using the link provided in any marketing email we send, or by contacting us directly at [email protected]. We will process your request promptly.

Please note that transactional emails - such as email verification, password reset, and purchase confirmations - are necessary for the operation of the Service and cannot be opted out of while you maintain an active account with us.

We do not sell, trade, or rent your personal information to third parties. We may disclose your personal information if we are required by law to do so, if you violate our Terms of Service, or if necessary to protect our rights or property. We may also disclose your information to our third-party service providers as necessary to operate the Service, as described in Section 5.

In general, the third-party providers used by us will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us. Certain providers, such as payment processors, have their own privacy policies for the information we must provide to them for your purchase-related transactions. We recommend that you read their privacy policies to understand how they will handle your personal information.

• Stripe - payment processing and merchant of record for purchases and subscriptions. Privacy policy: stripe.com/privacy
• Supabase - database, authentication, and infrastructure, hosted in the USA. Privacy policy: supabase.com/privacy
• Bunny.net - video hosting and content delivery. Privacy policy: bunny.net/privacy
• Cloudflare - DNS, CDN, and security services. Privacy policy: cloudflare.com/privacypolicy
• Hostinger - web hosting infrastructure. Privacy policy: hostinger.com/privacy-policy
• Our transactional email delivery provider, used to send the account and purchase emails described above.

Payment Processing: purchases are processed by Stripe. All payment information is encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase and comply with legal requirements. We do not store your complete credit card information on our servers.

Cookies are files with a small amount of data, which may include an anonymous unique identifier, sent to your browser and stored on your device. We use first-party cookies to keep you signed in to your account and to operate checkout and account-setup flows. These are functional cookies set by the Service itself - they are not third-party tracking cookies and are not shared with advertisers.

Most web browsers allow some control over cookies through browser settings. However, if you do not accept cookies, you will not be able to sign in or use portions of the Service that require an account.

Because there is no consistent industry understanding of how to respond to "Do Not Track" signals, we do not alter our data collection and usage practices when we detect such a signal.

We retain your personal information for as long as you maintain an active account with us, as necessary to provide you with the Service, or as required by law. When you request deletion of your account, we will delete or anonymize your personal information, except where retention is required by law.

Access-code redemption IP addresses and your most recent sign-in IP address are retained for as long as your account exists, as described in Section 1, and are deleted when your account is deleted. We keep them for that period because they are the evidence that lets us investigate code abuse and account sharing, which can surface long after the event. Automatically collected log data is retained as long as necessary for security, fraud prevention, and compliance purposes.

The security of your personal information is important to us. We implement reasonable and industry-standard security measures to protect your information against unauthorized access, alteration, disclosure, or destruction, including:

• Encrypted data transmission (HTTPS/TLS);
• Passwords stored only in securely hashed form by our authentication provider;
• Secure, httpOnly cookies for session management;
• Encrypted payment data handling in accordance with PCI-DSS standards, by our payment processor;
• Access controls limiting who can view your data; and
• Regular security reviews of our infrastructure.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

The Service is intended for users who are at least 18 years of age. By using the Service, you represent that you are at least 18 years old or the age of majority in your state or province of residence.

We do not knowingly collect personally identifiable information from anyone under 18 years of age. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at [email protected]. If we discover that someone under 18 has provided us with personal information, we will delete such information from our servers immediately.

For users in the European Union (EU), European Economic Area (EEA), and Switzerland, we comply with applicable data protection regulations including the General Data Protection Regulation (GDPR). You have the following rights regarding your personal data:

• Access - the right to request the personal data we hold about you;
• Correction - the right to request correction of inaccurate or incomplete data;
• Deletion - the right to request deletion of your personal data ("right to be forgotten");
• Restriction - the right to request that we restrict processing of your data;
• Objection - the right to object to certain types of processing;
• Data Portability - the right to receive your data in a portable format; and
• Withdraw Consent - the right to withdraw your consent for consent-based processing at any time.

We process your data on the following legal bases: your consent, contract performance (delivering services you enrolled in or purchased), compliance with legal obligations, and our legitimate interests in operating and improving the Service (including fraud prevention).

To exercise any of these rights, or for questions about how we handle your data, please contact us at [email protected]. We will respond to your request within 30 days. You may also lodge a complaint with a supervisory authority in your country of residence.

California residents have the right to request information about the categories of personal information we collect, the purposes for which we use it, and any third parties with whom we share it. You also have the right to request deletion of your personal information, subject to certain exceptions provided by law.

We do not sell personal information to third parties.

To submit a California privacy rights request, contact us at [email protected]. We will respond to your request within 45 days as required by law.

The Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We reserve the right to modify this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on this page. For significant changes, we will make reasonable efforts to notify you by email or by displaying a notice within the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

If you have any questions about this Privacy Policy, would like to access, correct, amend, or delete any personal information we have about you, or simply want more information, please contact Alton Teaches LLC at [email protected].