1. What This Policy Covers

This policy explains what personal data Infrina Academy collects, why we collect it, how long we keep it, and the choices you have. It applies to the Infrina Academy website and all courses and services offered through it.

2. Data We Collect

• Account data — name, email address, country, birthdate, phone, address, and a security question, provided when you register.
• Learning data — course enrollments, section progress, quiz answers and scores, reflections you save, and certificates earned.
• Identity verification data — when a course requires verified certification, images of a government-issued identity document you choose to submit, and the automated check result.
• Technical data — session cookies required to keep you signed in, and standard server logs (IP address, browser, pages requested) kept for security.

3. How We Use Your Data

We use your data to operate your account, track and certify course completion, verify identity where certification requires it, send transactional email (such as password resets and certificate notices), secure the platform, and comply with legal obligations. We do not sell your personal data, and we do not use it for third-party advertising.

4. Identity Documents

Identity document images are stored outside the public web space with restricted access and are used solely to confirm that the certificate name matches your identity. They are automatically deleted after the retention period (90 days) and are never shown publicly or shared with employers.

5. Service Providers

We share data only with the providers needed to run the Services: an email delivery provider (to send transactional email), an AI processing provider (to perform the automated identity document check), and a payment provider (to process purchases, if you make one). Each receives only the data required for its function.

6. Certificates and Public Verification

Certificate verification pages display the credential ID, the holder's name, the course title, and the issue date, so that employers can confirm authenticity. No other personal data is exposed.

7. Retention

Account and learning data are kept while your account is active. Identity documents are deleted after the retention period described above. Server logs are kept for a limited period for security purposes. When you delete your account, personal data is removed or anonymized except where we must retain it by law.

8. Your Rights

You may access and update your profile in account settings. You may request a copy of your data, its correction, or its deletion by contacting us. If you are in a jurisdiction with data protection laws (such as the GDPR), you may also have rights to restrict or object to processing and to lodge a complaint with a supervisory authority.

9. Cookies

We use a single strictly necessary session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

10. Changes

We may update this policy from time to time. Material changes will be announced on the platform or by email, and the date above will change.

11. Contact

Privacy questions or requests: contact us.