Privacy Policy

Expertise Pays(domain expertisepays.com, hereinafter referred to as "the Platform" or "we") is an online course SaaS service that helps course creators build and operate their own course websites, and provides accounts and learning services to their students. We take the protection of your personal data seriously and have established this Policy in accordance with applicable data protection laws, to explain how we collect, process, use, and protect your personal data.

This Policy applies when you use the Platform's official website and services. The operator of each course website (tenant) is an independent personal data controller, and the student data it collects on its own is the responsibility of that operator; if such website has its own privacy policy, that policy shall prevail.

1. Personal Data We Collect

1. Data You Actively Provide

• Account data: name, email, password (stored encrypted via hashing, which we cannot reverse), and contact phone number.
• Transactions and payments: orders, shipping/billing information, and purchase and course-enrollment records. Complete payment information such as credit card details is processed by our partner payment service providers; the Platform does not store your full card number.
• Content you provide in communications with our customer service, or in surveys or events.

2. When Using "Sign in with Google"

When you choose to sign in with your Google account, upon your authorization we obtain only the following minimally necessary data via Google OAuth, for the purpose ofcreating and identifying your account:

• Your email address
• Your basic public profile information (name, profile picture)
• The unique identifier of your Google account (used to verify whether it is the same account)

Signing in itselfwill notaccess any other data in your Google account (such as contacts, Drive or Gmail content), and we never act on your behalf. You can revoke our access at any time from your Google account's "Security → Third-party apps with account access"to revoke the Platform's access.

2-1. Connecting Google Calendar (optional, for instructors/site owners only)

If you run a site on this platform and use the online meeting booking feature, you may choose to authorise us to access your Google Calendar. This is entirely optional and no other feature depends on it.

• Scope requested: Google Calendar events (calendar.events).
• Purpose: when a visitor books a slot on your booking page, we create that event on your calendar on your behalf with its own Google Meet link; we update the event time if the visitor reschedules, and delete it if they cancel.
• We only write and maintain events created by this feature. We do not read, store or analyse any other events on your calendar.
• We do not share Google Calendar data with any third party, and we do not use it for advertising or to train AI models.
• You can disconnect at any time from the Bookings page in your dashboard, or revoke access from your Google account's third-party apps page. Once revoked, we can no longer access your calendar.

Our use of data obtained from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

3. Automatically Collected Data

• Connection information: IP address, device and browser type, and operating system.
• Usage behavior: pages browsed, learning and purchasing behavior, and referring URLs.
• Cookies and similar technologies (see the explanation below).

2. Purposes of Collection and How Data Is Used

• To provide, maintain, and improve the Platform's services, and to create and verify your account and activate courses and orders.
• To process payments, reconcile accounts, issue invoices, and provide customer service.
• To send transaction notifications, system emails, and (with your consent) marketing messages according to your settings.
• To maintain service security, prevent abuse and fraud, and comply with legal obligations.

3. Data Sharing and Third-Party Services

We do not sell your personal data. In order to provide our services, we share data with the following types of third-party service providers to the extent necessary:

• Identity sign-in: Google (Sign in with Google).
• Cloud hosting and networking: Cloudflare (hosting, CDN, and domain security).
• Payment services: Stripe, PayPal, and other regional payment gateways (depending on website settings).
• Video streaming: Bunny Stream.
• Email delivery: Resend and the email service providers supplied by the website operator.

In addition, where required by law or in the course of a lawful investigation by judicial or competent authorities, we may provide necessary data as required by law.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your login state, remember your shopping cart and preferences, and conduct traffic and performance analysis. You may reject or delete cookies through your browser settings, but some features (such as login and checkout) may not function properly as a result.

5. Data Retention Period

We retain your personal data for the period necessary to achieve the above-mentioned collection purposes; transaction- and accounting-related data is retained for the periods prescribed by tax and related laws and regulations. After the retention period expires or the purpose ceases to exist, we will delete or anonymize the data.

6. Data Security

We adopt reasonable technical and organizational measures to protect personal data, including transmission encryption (HTTPS), hashed storage of passwords, encrypted storage of sensitive credentials, and access-permission controls, in order to reduce the risk of unauthorized access to, alteration of, or disclosure of data.

7. Your Rights

Under applicable data protection law, you may exercise the following rights with respect to your personal data:

• To inquire about, review, or request copies of the data.
• To request supplementation or correction.
• To request cessation of collection, processing, or use, or to request deletion.
• To withdraw prior consent (for example, revoking Google sign-in authorization or unsubscribing from marketing emails).

To exercise the above rights, please contact us using the contact information below. You may also manage some of your data yourself in your account settings.

8. Minors

The Platform's services are not primarily directed at minors. Persons under the statutory age should use this service with the consent and assistance of their legal representative; if we become aware that we have collected a minor's data without such consent, we will delete it as soon as possible.

9. Amendments to This Policy

This Policy may be updated due to changes in laws or services. Amendments will be announced on this page, and the "Last Updated" date above will be updated. Material changes will be notified by appropriate means.

10. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us by email:service@expertisepays.com。