Privacy Notice

1. Who we are

Excel Mastery ("we", "us") is the data controller (and "responsible party" under South Africa's POPIA) for personal data collected through the Service. Contact: support@excelmastery.io.

2. Data we collect

• Account data: name, email, password hash, avatar, profile bio.
• Learning data: enrollments, progress, lesson completion, reviews, certificates.
• Support & communications: messages you send us.
• Technical: IP address, device, browser, log data, usage telemetry.
• Cookies: session cookies and limited analytics cookies.

Payment data (card details, billing address) is collected and processed by our reseller Paddle, not by us.

3. Why we use it & legal basis

• To create and operate your account, deliver the Service — contract performance.
• To prevent fraud, maintain security, debug — legitimate interests.
• To send transactional emails (receipts, password reset) — contract performance.
• To improve the product — legitimate interests.
• To send marketing emails (if applicable) — consent, withdrawable at any time.
• To comply with tax, accounting and legal obligations — legal obligation.

4. Who we share data with

• Paddle — our Merchant of Record, for payments, subscription management, tax compliance and invoicing.
• Hosting & infrastructure providers (e.g. Supabase, Cloudflare) — to run the Service.
• Email delivery providers — to send transactional emails.
• Professional advisers (legal, accounting) where needed.
• Authorities where legally required.

5. International transfers

Some providers may process data outside your country. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

6. Retention

We keep account and learning data while your account is active. After account deletion, personal data is deleted or anonymised within 30 days, except where retention is required by law (e.g. tax records, kept up to 7 years).

7. Your rights

Subject to your local law, you may have rights to access, rectify, erase, restrict, or port your data, or object to processing. South African residents have these rights under POPIA and may complain to the Information Regulator (inforegulator.org.za). EEA/UK residents have equivalent rights under the GDPR and may complain to their local supervisory authority. Contact support@excelmastery.io to exercise these rights; we respond within 30 days.

8. Security

We use appropriate technical and organisational measures including encryption in transit, hashed passwords and access controls. No system is 100% secure.

9. Cookies

We use essential cookies to keep you signed in. We may use limited analytics cookies. You can control cookies via your browser.

10. Changes

We may update this notice; material changes will be communicated via email or in-app.