Privacy Policy

1. Introduction & Scope

ESPBoards Learn ("we," "our," "us," or the "Platform") is committed to protecting your privacy to the extent reasonably possible while providing our services. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your information when you visit our website and use our learning platform.

This Privacy Policy applies to all information collected through our Platform, including any related services, sales, marketing, or events. By using the Platform, you consent to the practices described herein.

We reserve the right to modify this Privacy Policy at any time. Your continued use of the Platform after changes are posted constitutes your acceptance of such changes.

2. Information We Collect

We collect various types of information to provide and improve our services. By using the Platform, you consent to the collection of all information described below.

Information You Provide Directly

• Email address and authentication credentials
• Display name, profile picture, and biographical information
• Content you post in forums, discussions, and comments
• Communications with us (support requests, feedback, surveys)
• Any other information you voluntarily provide

Information Collected Automatically

• IP address, browser type, operating system, and device information
• Pages visited, time spent, click patterns, and navigation paths
• Referring URLs and exit pages
• Date and time stamps of all activities
• Geolocation data (country, region, city)
• Unique device identifiers and mobile network information

Learning & Usage Data

• Lesson completions, progress, and engagement metrics
• Quiz answers, scores, and attempts
• Time spent on lessons, sections, and interactive elements
• Code submissions and project completions
• Achievements, XP, streaks, and gamification data
• Learning patterns and behavioral analytics

Payment Information

We use third-party payment processors (currently Stripe) to process payments:

• Payment details are collected and processed directly by our payment processors
• We do not store complete credit card numbers on our servers
• We receive and store transaction confirmations, amounts, dates, and partial card information
• Billing name, address, and contact information may be retained for legal and accounting purposes
• Payment processors may store your information according to their own policies

Review Stripe's Privacy Policy for details on their data practices. We are not responsible for third-party privacy practices.

3. Cookies, Tracking & Analytics

Cookies and Similar Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information automatically. By using the Platform, you consent to our use of these technologies. Types of cookies we use include:

• Essential Cookies: Required for authentication, security, and basic functionality
• Preference Cookies: Remember your settings (e.g., dark mode, language)
• Analytics Cookies: Track usage patterns and help us improve the Platform
• Performance Cookies: Monitor site performance and load times

You can manage cookie preferences through your browser settings. However, disabling cookies may limit functionality of the Platform, and we are not responsible for any resulting limitations.

Google Analytics

We use Google Analytics and may use other analytics services to analyze usage of the Platform. These services collect:

• Pages visited, time spent, and user flow patterns
• Device type, browser, screen resolution, and operating system
• Geographic location (country, region, city)
• Referral sources and campaign attribution
• User interactions, events, and conversions
• Demographic and interest data (where available)

This data helps us understand usage patterns and improve our services. Google may use this data according to their own privacy policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. We are not responsible for data collected directly by Google.

Do Not Track Signals

Some browsers offer a "Do Not Track" feature. We do not currently respond to Do Not Track signals as there is no industry standard for handling these requests.

4. How We Use Your Information

We use collected information for any purpose consistent with providing our services, including but not limited to:

• Providing, operating, and maintaining the Platform
• Tracking your learning progress and awarding achievements
• Processing transactions and managing subscriptions
• Communicating with you about your account, updates, and promotional offers
• Personalizing your experience and recommending content
• Analyzing usage patterns to improve the Platform
• Detecting, preventing, and addressing fraud, abuse, and security issues
• Enforcing our Terms of Service and other policies
• Complying with legal obligations and responding to legal requests
• Protecting our rights, property, and safety, and that of our users
• Aggregating and anonymizing data for research and analytics
• Any other purpose with your consent or as permitted by law

5. Disclosure of Your Information

We may share or disclose your information in the following circumstances:

Service Providers

• Stripe - Payment processing
• Google Analytics - Website analytics
• Supabase - Database, authentication, and hosting
• Email service providers - Transactional and marketing communications
• Cloud infrastructure providers - Hosting and storage
• Other vendors necessary to operate the Platform

Legal & Business Purposes

• To comply with applicable laws, regulations, legal processes, or governmental requests
• To enforce our Terms of Service, policies, and agreements
• To protect our rights, property, safety, and that of our users or the public
• To detect, prevent, or address fraud, security, or technical issues
• In connection with a merger, acquisition, reorganization, bankruptcy, or sale of assets
• To professional advisors (lawyers, accountants, auditors) as necessary

Aggregated & De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for any purpose, including research, marketing, analytics, and improving our services.

With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

6. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your information. These include:

• Encryption of data in transit (TLS/HTTPS)
• Secure password hashing algorithms
• Row-level security policies in our database
• Access controls and authentication requirements
• Regular security assessments

HOWEVER, NO METHOD OF TRANSMISSION OVER THE INTERNET OR ELECTRONIC STORAGE IS 100% SECURE. WE CANNOT GUARANTEE ABSOLUTE SECURITY OF YOUR DATA. YOU TRANSMIT INFORMATION AT YOUR OWN RISK. WE ARE NOT RESPONSIBLE FOR CIRCUMVENTION OF ANY PRIVACY SETTINGS OR SECURITY MEASURES.

You are responsible for maintaining the confidentiality of your account credentials and for any activities that occur under your account.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal, accounting, and regulatory obligations
• Enforce our agreements and resolve disputes
• Maintain business records for legitimate purposes
• Protect against legal claims and fraud

After account deletion, we may retain certain information in anonymized or aggregated form, backup archives, or as required by law. Some information may persist in logs, backups, and third-party services for extended periods.

8. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States and other countries where our service providers operate. These countries may have data protection laws that differ from your jurisdiction.

By using the Platform, you consent to the transfer of your information to these countries. We will take reasonable steps to ensure your information is treated securely and in accordance with this Privacy Policy.

9. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and personal data
• Portability: Request a copy of your data in a structured format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent where processing is based on consent

Exercising Your Rights

To exercise these rights, contact us at info@espboards.dev. We may require verification of your identity before processing requests. We will respond within the timeframe required by applicable law.

Limitations: We may deny or limit requests where permitted by law, including where fulfilling the request would: (a) compromise another person's privacy; (b) interfere with a legal investigation; (c) violate applicable law; (d) be technically infeasible; or (e) impose an unreasonable burden on us. We may retain certain information as required by law or for legitimate business purposes even after a deletion request.

Marketing Communications

You may opt out of marketing emails by clicking the "unsubscribe" link in any marketing email. Note that you may still receive transactional emails related to your account, purchases, and service updates even after opting out of marketing communications.

10. California Privacy Rights (CCPA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights

We do not sell personal information as defined under the CCPA. To exercise your CCPA rights, contact us at info@espboards.dev.

11. Children's Privacy

The Platform is not intended for children under 13 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@espboards.dev. If we discover that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

Users between 13 and 18 years of age should have a parent or guardian review this Privacy Policy and our Terms of Service.

12. Third-Party Websites & Services

The Platform may contain links to third-party websites, services, or content that are not owned or controlled by us. This Privacy Policy applies only to our Platform.

WE ARE NOT RESPONSIBLE FOR THE PRIVACY PRACTICES, CONTENT, OR SECURITY OF THIRD-PARTY WEBSITES OR SERVICES. WE ENCOURAGE YOU TO REVIEW THE PRIVACY POLICIES OF ANY THIRD-PARTY SITES YOU VISIT. YOUR INTERACTIONS WITH THIRD-PARTY SERVICES ARE GOVERNED BY THEIR RESPECTIVE TERMS AND POLICIES.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time at our sole discretion. Changes will be effective immediately upon posting to the Platform with an updated "Last updated" date. We may, but are not obligated to, notify you of material changes via email or through the Platform.

Your continued use of the Platform after changes are posted constitutes your acceptance of the revised Privacy Policy. It is your responsibility to review this Privacy Policy periodically for updates.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our privacy practices, please contact us at:

Email: info@espboards.dev

We will make reasonable efforts to respond to your inquiry within a reasonable timeframe. However, we are not obligated to respond to all communications, and our failure to respond does not constitute a waiver of any rights.