Privacy Policy

1. What Data We Collect

We collect the following categories of personal data:

• Account information: your name and email address when you register
• Payment information: billing details processed by Stripe (we never store card numbers)
• Usage data: lesson watch history, course progress, and completion status
• Communication data: messages you send us via the contact form or email
• Technical data: IP address, browser type, and device information collected automatically via logs

2. How We Use Your Data

We use your data to:

• Create and manage your account
• Process payments and grant course access
• Track your learning progress within the platform
• Send transactional emails (receipts, password resets, course updates)
• Respond to your support or inquiry messages
• Improve the quality and functionality of our platform
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for automated profiling or decision-making.

3. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy policy:

• Stripe — payment processing. Stripe handles all card data and is PCI DSS compliant.
• Supabase — our database and authentication provider. Data is stored on servers in the EU region.
• Cloudflare — video hosting and delivery via Cloudflare Stream. Videos are served via signed, time-limited URLs.
• Resend— transactional email delivery. Email logs are retained per Resend's data retention policy.
• Vercel — website hosting. Vercel may process request logs temporarily for performance and security.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law (e.g., financial records which may be retained for up to 7 years per Georgian tax law). Watch history and progress data are deleted alongside your account.

5. Your Rights

You have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data via your account settings or by contacting us
• Delete your account and associated personal data
• Export your data in a portable format upon request
• Withdraw consent for marketing communications at any time

To exercise any of these rights, email us at hello@anamariarig.com with the subject line “PRIVACY REQUEST.”

6. GDPR Notice

EU and EEA visitors are welcome. If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority. Our lawful basis for processing your data is contract performance (fulfilling your course purchase) and legitimate interests (platform improvement and security). We do not transfer your data outside the EU/EEA except to services covered by Standard Contractual Clauses or equivalent adequacy decisions.

7. Cookies

We use cookies strictly necessary for authentication (session management) and basic analytics. We do not use advertising cookies or track you across third-party sites. You can manage cookie preferences via the consent banner shown on your first visit.

8. Contact for Privacy Requests

For any privacy-related questions, data access requests, or deletion requests, contact us at hello@anamariarig.com. We aim to respond within 10 business days.