Privacy Policy

1. Introduction

At CNV Academy ("we", "us", or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

Personal Information

We may collect the following personal information:

• Name and email address when you create an account
• Payment information when you purchase courses
• Profile information such as bio, profile picture, and preferences
• Communications you send to us or through our platform

Usage Information

We automatically collect certain information about your device and usage:

• IP address, browser type, and operating system
• Pages visited and time spent on our platform
• Course progress and completion data
• Device identifiers and cookies

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Personalize your learning experience
• Personalize AI tool suggestions and feedback based on your CNV profile (level, OSBD components, frequent pseudo-feelings)
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent or unauthorized activities

4. Information Sharing

We do not sell your personal information. We may share your information in the following situations:

• With Instructors: Course enrollment and progress data with course instructors
• Service Providers: With third-party vendors who perform services on our behalf
• Anthropic: AI processing for tools and dialogue simulator
• Legal Requirements: If required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

4bis. Main Sub-processors

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. These include encryption, secure servers, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

5bis. Legal Basis for Processing

5ter. Retention Periods

6. Your Rights (GDPR)

Under the GDPR and applicable privacy laws, you have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal information (right to be forgotten)
• Portability: Request a copy of your data in a portable format (JSON)
• Opt-out: Opt out of marketing communications
• Restriction: Request restriction of processing
• Objection: Object to processing based on legitimate interests

You can also contact our Data Protection Officer at: dpo@cnv-academy.com

7. Cookies and Tracking

We use cookies and similar tracking technologies to collect and track information about your browsing activities. You can control cookies through your browser settings. For more information, see our Cookie Policy.

8. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

9. International Data Transfers

Some of our sub-processors are located in the United States (Vercel, Railway, Stripe, Anthropic, PostHog, Resend, Sentry, Cloudflare). These transfers are secured by Standard Contractual Clauses (SCC) approved by the European Commission, or by specific guarantees (PCI-DSS for Stripe, data stored in EU for Supabase). See the sub-processors table in §4bis for full details.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@cnv-academy.com

11bis. Newsletter

If you subscribe to our newsletter, we process your email address based on your consent. Confirmation is done via double opt-in. You can unsubscribe at any time via the link in each email.

11ter. Account Deletion

You can delete your account from Settings > Delete my account. Deletion results in the immediate anonymization of your email and personal data. Billing data is retained for 10 years in accordance with legal obligations. Access to purchased courses is maintained via an anonymized account.