Privacy Policy

Last updated: December 29, 2025

1. Information We Collect

Account Information: When you register, we collect your name, email address, and password.

Profile Data: You may provide additional information such as profile picture, bio, and professional details.

Identity Verification: For certification, we collect government-issued ID and identity verification documents.

Course Activity: We track course enrollments, progress, completion status, and assessment results.

Payment Information: We process payments via Stripe and PayPal. We do not store full credit card details.

Technical Data: IP address, browser type, device information, and usage analytics.

2. How We Use Your Information

We use collected data to:

• ✅ Provide and maintain platform services
• ✅ Process course enrollments and certifications
• ✅ Verify identity for certification programs
• ✅ Send important updates and notifications
• ✅ Improve user experience and platform features
• ✅ Prevent fraud and ensure platform security
• ✅ Comply with legal obligations

3. Data Sharing and Disclosure

We share your information in limited circumstances:

Instructors: When you enroll in a course, instructors see your name and progress to provide better support.

Organizations: If enrolled via bulk licensing, your organization admin can track your progress.

Service Providers: We use third-party services (e.g., Stripe, PayPal, AWS) that may access limited data to provide services.

Legal Requirements: We may disclose information if required by law or to protect our legal rights.

Ecosystem Integration: If you use Codexa Serve or Codexa Store, your Verified status and certifications are shared across platforms.

We NEVER sell your personal information to third parties.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. See our Cookie Policy for details. You can control cookie preferences through your browser settings.

5. Data Security

We implement industry-standard security measures:

• 🔒 SSL/TLS encryption for data transmission
• 🔒 Encrypted storage for sensitive data
• 🔒 Regular security audits and vulnerability assessments
• 🔒 Access controls and authentication
• 🔒 Secure backup and disaster recovery

While we take reasonable measures, note that no system is completely secure.

6. Data Retention

We retain your data as long as your account is active. After account deletion:

• 📅 Account data is deleted within 90 days
• 📅 Certifications are retained for verification purposes
• 📅 Financial records are kept for 7 years (legal requirement)
• 📅 Anonymized analytics may be retained indefinitely

7. Your Rights (GDPR Compliance)

You have the right to:

• ✅ Access: Request a copy of your personal data
• ✅ Rectification: Correct inaccurate or incomplete data
• ✅ Erasure: Request deletion of your data (\"right to be forgotten\")
• ✅ Portability: Receive your data in a structured, machine-readable format
• ✅ Restriction: Limit how we process your data
• ✅ Objection: Object to data processing for specific purposes
• ✅ Withdraw Consent: Revoke consent for data processing

To exercise these rights, contact privacy@codexalabs.io

8. Children's Privacy

Codexa Academy is not intended for users under 13. We do not knowingly collect information from children. If you believe a child has provided us with personal data, please contact us immediately.

9. International Data Transfers

Your data may be transferred and stored in servers located outside your country of residence, including in India and the United States. We ensure adequate safeguards are in place for cross-border data transfers.

10. Email Communications

You will receive:

• 📧 Transactional emails (order confirmations, password resets)
• 📧 Important platform updates and security alerts
• 📧 Optional marketing emails (you can unsubscribe anytime)

Unsubscribe links are included in all marketing emails.

11. Third-Party Links

Our platform may contain links to external websites. We are not responsible for the privacy practices of third-party sites. Please review their privacy policies before providing information.

12. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email. Continued use after changes indicates acceptance of the updated policy.

13. Contact Us

For privacy-related questions or concerns:

• Email: privacy@codexalabs.io
• Data Protection Officer: dpo@codexalabs.io
• Address: p/n 03 w/n 03, sikar city, rajasthan, india 332001