Privacy Policy

Last updated: January 12, 2025

1. Introduction

Welcome to Riccode Academy. This Privacy Policy explains how we collect, use, and protect your personal data when you use this platform. We are committed to compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

This platform is powered by Primaris, which provides the underlying technology infrastructure.

2. Information We Collect

Account Information: Name, email address when you create an account.
Usage Data: Information about how you interact with courses and content on this platform.
Authentication Data: Session tokens stored in secure, HTTP-only cookies to keep you logged in.

3. How We Use Your Data

To provide access to courses and content you are enrolled in.
To manage your account and authentication.
To communicate important service updates.

4. Cookies

We use the following cookies:

Essential cookies: Authentication tokens (HTTP-only, secure) required for the platform to function. These do not require consent.
Third-party cookies: Embedded video content (YouTube, Vimeo, Loom) may set cookies for playback and analytics. We ask for your consent before loading these embeds.

5. Third-Party Services

This platform may embed content from third-party video providers including YouTube, Vimeo, and Loom. These services have their own privacy policies:

6. Data Storage

Your data is stored securely using industry-standard infrastructure. Files and media are stored on AWS S3. The database and application are hosted on secure servers managed by the platform provider.

7. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

Access your personal data.
Rectify inaccurate or incomplete data.
Erase your personal data ("Right to be Forgotten").
Restrict processing of your data.
Data portability — request your data in a machine-readable format.
Object to processing of your data.

To exercise any of these rights, please contact the platform administrator.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Authentication tokens are stored in HTTP-only, secure cookies that cannot be accessed by JavaScript.