Privacy Policy
Last updated: January 12, 2026
1. Introduction
Baccarat Smart Academy ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational platform.
2. Information We Collect
2.1 Information You Provide
- Account Information: Display name, email address, and password when you register
- Payment Information: Billing details processed securely by Stripe (we do not store full card numbers)
- Communications: Messages you send to our support team
2.2 Information Collected Automatically
- Progress Data: Lesson completion, quiz scores, and learning progress
- Usage Data: Pages visited, features used, and time spent on the platform
- Device Information: Browser type, operating system, and device identifiers
- Log Data: IP address, access times, and referring URLs
3. How We Use Your Information
We use your information to:
- Provide and maintain the educational platform
- Track your learning progress and personalize your experience
- Process payments and manage subscriptions
- Send account-related communications (e.g., password resets, subscription updates)
- Improve our content and platform based on usage patterns
- Respond to your inquiries and provide customer support
- Detect and prevent fraud or abuse
4. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), we process your data based on:
- Contract: To provide the services you signed up for
- Consent: For marketing communications (you can withdraw anytime)
- Legitimate Interests: To improve our platform and prevent fraud
- Legal Obligation: To comply with applicable laws
5. Data Sharing and Disclosure
We may share your information with:
- Service Providers: Third parties that help us operate our platform (e.g., Stripe for payments, AWS for hosting)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal information to third parties.
6. Data Security
We implement industry-standard security measures including:
- Encryption of data in transit (HTTPS/TLS)
- Secure password hashing (bcrypt)
- JWT-based authentication with secure token handling
- Regular security audits and updates
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your data for as long as:
- Your account is active
- Necessary to provide our services
- Required by law (e.g., financial records)
You can request deletion of your account and associated data at any time.
8. Your Rights
Depending on your location, you may have the following rights:
GDPR Rights (EEA Users)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a portable format
- Objection: Object to certain types of processing
CCPA Rights (California Users)
- Know: What personal information we collect and how we use it
- Delete: Request deletion of your personal information
- Opt-Out: Opt out of the sale of personal information (we do not sell data)
- Non-Discrimination: Equal service regardless of privacy choices
9. Cookies and Tracking
We use cookies and similar technologies to:
- Keep you logged in (session cookies)
- Remember your preferences
- Analyze usage patterns (analytics cookies)
You can control cookies through your browser settings. Disabling cookies may affect some platform functionality.
10. Third-Party Services
We use the following third-party services:
- Stripe: Payment processing (Stripe Privacy Policy)
- AWS: Cloud hosting and data storage (AWS Privacy Policy)
11. Children's Privacy
Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
12. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Continued use after changes constitutes acceptance of the updated policy.
14. Contact Us
For questions about this Privacy Policy or to exercise your rights, contact us at:
Email: privacy@baccaratsmart.com