Privacy Policy

1. Introduction

EduForge ("EduForge", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered training content generation services ("Service") at https://eduforge.com.

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

We collect information in several ways to provide and improve our Service to you.

2.1 Information You Provide to Us

• Account Information: Name, email address, company name, job title, profile picture (optional)
• Payment Information: Payment card details processed exclusively by our PCI-DSS-compliant payment processor Waffo Pancake. We do not store your full card number, CVV, or card expiration date on our servers
• Training Content: Documents (PDF, Word, PowerPoint), course outlines, quiz questions, and other materials you upload
• Communications: Information you provide when contacting support, responding to surveys, or participating in promotions

2.2 Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features accessed, time spent, click patterns
• IP Address: Collected for security, analytics, and service improvement
• Learning Progress: Course completion rates, quiz scores, time spent on training materials

2.3 Information from Third Parties

• AI Service Providers: DeepSeek AI (for content generation)
• Payment Processors: Waffo Pancake (for PCI-DSS compliant payment processing)
• Authentication Providers: Google OAuth (if you choose to sign in with Google)

3. How We Use Your Information

We use collected information for the following purposes:

• Providing and maintaining the Service, including account creation and management
• Processing payments through our PCI-DSS-compliant payment processor Waffo Pancake
• Generating AI-powered training content using DeepSeek AI technology
• Tracking learning progress and generating analytics
• Improving, personalizing, and optimizing the Service
• Communicating with you about your account, subscriptions, and service updates
• Detecting, investigating, and preventing fraudulent or unauthorized activities
• Complying with legal obligations and enforcing our Terms of Service

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

• Service Providers: Trusted third parties who assist in operating our Service (cloud hosting, email delivery, analytics)
• Payment Processing: Waffo Pancake processes all payment card data. Their privacy policy governs their handling of your payment information
• AI Service Providers: DeepSeek AI processes your input content solely for generating training materials as part of the Service
• Legal Requirements: When required by law, court order, or governmental authority
• Protection of Rights: To protect the rights, property, or safety of EduForge, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Payment Processing and PCI-DSS Compliance

Waffo Pancake is our exclusive payment processor for handling payment card data. Waffo Pancake is PCI-DSS Level 1 certified, the highest level of payment card industry data security certification.

When you make payments on EduForge:

• You enter your card details directly into Waffo Pancake's secure payment forms
• Card data is transmitted and stored by Waffo Pancake in their PCI-DSS compliant environment
• We receive only transaction confirmation and last 4 digits of your card from Waffo Pancake
• We never handle or store your full card number, CVV, or card expiration date

For more information about Waffo Pancake's privacy practices, please visit their privacy policy.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate our Service. Below is a breakdown of the cookie types we use:

Cookie Type	Purpose	Duration
Essential Cookies	Required for Service functionality (authentication, security, session management)	Session / 7 days
Functional Cookies	Remember your preferences and settings	30 days - 1 year
Analytics Cookies	Understand how you use the Service to improve it	30 days - 2 years
Marketing Cookies	Deliver relevant advertisements (we do not use third-party marketing cookies)	N/A

You may control cookies through your browser settings. Disabling essential cookies may impair Service functionality.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Regular security assessments and penetration testing
• Access controls limiting employee access to personal data on a need-to-know basis
• PCI-DSS compliance through our payment processor Waffo Pancake
• Incident response procedures for data breach notification

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Data Retention

We retain your personal data for as long as your account is active and for a period afterward as follows:

Data Category	Retention Period
Account Information	90 days after account deletion
Training Content (uploads)	90 days after account deletion
AI-Generated Content	90 days after account deletion
Learning Progress & Analytics	90 days after account deletion
Payment Transaction Records	7 years (tax and accounting compliance)
Communication Records	3 years after last interaction

After the retention period, data is securely deleted or anonymized. You may request earlier deletion at any time.

9. Your Rights (GDPR and CCPA)

Depending on your location, you may have the following rights regarding your personal data:

Right	Description	How to Exercise
Right to Access	Request a copy of your personal data	Account Settings or privacy@eduforge.com
Right to Rectification	Correct inaccurate personal data	Account Settings or privacy@eduforge.com
Right to Erasure	Request deletion of your personal data	privacy@eduforge.com
Right to Restrict Processing	Limit how we use your data	privacy@eduforge.com
Right to Data Portability	Receive your data in a structured format	privacy@eduforge.com
Right to Object	Object to processing based on legitimate interests	privacy@eduforge.com
Right to Withdraw Consent	Withdraw consent where processing is based on consent	Account Settings or privacy@eduforge.com
Right to Lodge Complaint	File a complaint with a data protection authority	Contact your local data protection authority

We commit to responding to rights requests within 30 days. For identity verification, we may request additional information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by relevant data protection authorities.

11. Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly. If you believe we have collected data from a child under 16, please contact us at privacy@eduforge.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide a more prominent notice (such as email notification). Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights:

• General Privacy Inquiries: privacy@eduforge.com
• Data Protection Officer: dpo@eduforge.com
• Security Issues: security@eduforge.com
• Postal Address: EduForge, [Street Address], [City, Country/Region]