Privacy Policy

1. What Data We Collect

We collect the following categories of personal data:

• Account information: your name and email address when you register
• Payment information: billing details processed by our secure payment provider, Bank of Georgia (we never store card numbers)
• Usage data: lesson watch history, course progress, and completion status
• Communication data: messages you send us by email, contact form, Facebook Messenger, or Instagram Direct, including your profile name or handle, attachments, and conversation history available through those channels
• Technical data: IP address, browser type, and device information collected automatically via logs

2. How We Use Your Data

We use your data to:

• Create and manage your account
• Process payments and grant course access
• Track your learning progress within the platform
• Send transactional emails (receipts, password resets, course updates)
• Manage and respond to your messages, including with automatically generated replies when enabled
• Improve the quality and functionality of our platform
• Comply with legal obligations

We do not sell your personal data. Some Messenger and Instagram replies may be generated and sent automatically. You can request a human response by writing to info@anamariarig.com.

3. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy policy:

• Bank of Georgia — payment processing via the bank's payment system. All card data is handled by the bank in full PCI DSS Level 1 compliance.
• Supabase — our database and authentication provider. Data is stored on servers in the EU region.
• Cloudflare — video hosting and delivery via Cloudflare Stream. Videos are served via signed, time-limited URLs.
• Resend — transactional email delivery. Email logs are retained per Resend's data retention policy.
• Netlify — website hosting. Netlify may process request logs temporarily for performance and security.
• Meta — Facebook Messenger and Instagram deliver messages and account details to us and retain data under their own policies.
• 9router and its configured AI provider — when automatic replies are enabled, relevant message content and conversation context may be sent through 9router to a configured AI model to draft a reply. The provider used can vary with the routing configuration.

We use a self-hosted ChatbotX inbox to manage Messenger and Instagram conversations. It may import earlier messages available through Meta so we can see conversation context and respond.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law (e.g., financial records which may be retained for up to 7 years per Georgian tax law). Watch history and progress data are deleted alongside your account.

For Messenger or Instagram messages, including imported history, contact info@anamariarig.com to request access or deletion from our systems. Deleting our copy does not delete copies held by Meta or by other participants in the conversation.

5. Your Rights

You have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data via your account settings or by contacting us
• Delete your account and associated personal data
• Export your data in a portable format upon request
• Withdraw consent for marketing communications at any time

To exercise any of these rights, email us at info@anamariarig.com with the subject line "PRIVACY REQUEST."

6. GDPR Notice

EU and EEA visitors are welcome. If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority. Our lawful basis for processing your data is contract performance (fulfilling your course purchase) and legitimate interests (platform improvement and security).

7. Cookies

We use cookies strictly necessary for authentication (session management) and basic analytics. We do not use advertising cookies or track you across third-party sites. You can manage cookie preferences via the consent banner shown on your first visit.

8. Contact for Privacy Requests

For any privacy-related questions, data access requests, or deletion requests, contact us at info@anamariarig.com. We aim to respond within 10 business days.