Privacy Policy

1. Information We Collect

Account Information: When you create an account, we collect your email address and display name. If you authenticate via a third-party provider (such as Discord), we receive your public profile information and unique identifier from that provider.

Authentication Data: We use Supabase as our authentication and database provider. Supabase processes and stores session tokens, OAuth tokens, and related authentication metadata on our behalf.

Payment Information: Payments are processed by Stripe, Inc. We do not store your credit card number, CVV, or full payment card details on our servers. Stripe collects and processes payment information in accordance with its own privacy policy. We receive only transaction confirmations, subscription status, and the last four digits of your card for reference.

Usage Data: We automatically collect information about how you interact with the Service, including pages visited, features used, timestamps, device type, browser type, and IP address.

User-Generated Content: Any content you create, upload, or submit through the Service (including course materials, text, and images) is stored on our infrastructure.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service;
• Process transactions and manage subscriptions;
• Send transactional communications (e.g., account confirmations, billing receipts, security alerts);
• Respond to your inquiries and provide customer support;
• Monitor and analyze usage trends to improve user experience;
• Detect, prevent, and address fraud, abuse, and technical issues;
• Enforce our Terms of Service and comply with legal obligations.

3. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information to third parties. We share data only with the following categories of service providers, solely to operate the Service:

• Supabase, Inc. — Authentication, database hosting, and file storage.
• Stripe, Inc. — Payment processing and subscription management.
• Discord, Inc. — Optional integration for community features. If you connect your Discord account, we receive your Discord user ID and public profile data.

We may also disclose information if required by law, subpoena, court order, or government request, or to protect the rights, property, or safety of NetGrind, its users, or the public.

4. Cookies and Tracking Technologies

We use the following technologies:

• Session Cookies: Essential cookies required for authentication and maintaining your logged-in state.
• Local Storage: Used to store user preferences and session data on your device.

We do not use third-party advertising trackers, behavioral analytics cookies, or cross-site tracking pixels.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. If you request deletion of your account, we will delete or anonymize your personal data within thirty (30) days of your request, unless we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Deletion: Request erasure of your personal data, subject to legal retention requirements.
• Data Portability: Request a machine-readable copy of your data.
• Objection: Object to the processing of your data for specific purposes.
• Opt-Out of Sale: We do not sell personal data. If applicable law grants you the right to opt out of a "sale" of personal information, please note that no such sale occurs.

To exercise any of these rights, please contact us at contact@netgrind.online. We will respond to your request within thirty (30) days.

GDPR (European Economic Area): If you are located in the EEA, our legal basis for processing your data is contractual necessity (to provide the Service) and legitimate interest (to improve and secure the Service). You have the right to lodge a complaint with your local Data Protection Authority.

CCPA (California): California residents have the right to know what data is collected, request deletion, and opt out of the sale of personal information. As stated above, we do not sell personal data.

7. Data Security

We implement industry-standard security measures to protect your information, including TLS encryption for data in transit and encryption at rest for stored data. Our infrastructure is hosted on Supabase, which maintains SOC 2 Type II compliance. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed at individuals under the age of sixteen (16). We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete such information promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and the European Union, depending on the location of our infrastructure providers. By using the Service, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your home jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the Service prior to the change becoming effective. Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

contact@netgrind.online