1. Introduction
At XRP Academy ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.
This policy also includes our Cookie Policy, explaining how we use cookies and similar technologies.
2. Information We Collect
Information You Provide:
- Account Information: Name, email address, password
- Profile Information: Optional profile details, preferences
- Payment Information: Billing address, payment method (processed by third-party processors)
- Communications: Messages you send us, feedback, support requests
- Course Progress: Learning data, quiz results, completion status
Information Collected Automatically:
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, time spent, clicks, navigation paths
- Location Data: General geographic location based on IP address
- Cookies & Tracking: Data collected through cookies (see Cookie Policy below)
Information from Third Parties:
- Social Media: If you sign up using social media accounts
- Payment Processors: Transaction confirmation from Stripe, PayPal, etc.
- Analytics Providers: Aggregated usage statistics
3. How We Use Your Information
We use your information for the following purposes:
- Service Delivery: Provide access to courses and educational content
- Account Management: Create and maintain your account
- Payment Processing: Process transactions and send receipts
- Communication: Send course updates, newsletters, and important notices
- Personalization: Customize content based on your interests and progress
- Improvement: Analyze usage to improve our platform and content
- Security: Protect against fraud and unauthorized access
- Legal Compliance: Fulfill legal obligations and enforce our terms
- Marketing: Send promotional content (with your consent)
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your data based on:
- Contract Performance: Processing necessary to provide services you requested
- Legitimate Interests: Improving our platform, fraud prevention, security
- Legal Obligation: Complying with applicable laws
- Consent: Marketing communications, optional features
5. How We Share Your Information
We do not sell your personal data. We may share your information with:
Service Providers:
- Payment processors (Stripe, PayPal)
- Email service providers
- Analytics providers (Google Analytics)
- Hosting and cloud storage providers
Legal Requirements:
We may disclose information if required by law, court order, or government request.
Business Transfers:
In the event of a merger, acquisition, or sale, your data may be transferred to the new entity.
With Your Consent:
We may share data with third parties when you explicitly consent.
6. Cookie Policy
What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and analyze how our site is used.
Types of Cookies We Use:
1. Essential Cookies (Required)
Necessary for the website to function. You cannot opt out of these.
- Session management and authentication
- Security and fraud prevention
- Load balancing
2. Analytics Cookies
Help us understand how visitors use our site.
- Google Analytics (anonymized)
- Page views and navigation patterns
- Error tracking and diagnostics
3. Functional Cookies
Remember your preferences and choices.
- Language preferences
- User interface settings
- Course progress tracking
4. Marketing Cookies (Optional)
Used to deliver relevant advertisements.
- Ad targeting and retargeting
- Social media integration
- Campaign effectiveness measurement
Managing Cookies:
You can control cookies through:
- Browser Settings: Most browsers allow you to block or delete cookies
- Our Cookie Preferences: Use our cookie consent tool when you first visit
- Opt-Out Links: Google Analytics opt-out: tools.google.com/dlpage/gaoptout
Note: Blocking cookies may affect website functionality.
Third-Party Cookies:
Some cookies are placed by third-party services that appear on our pages. We do not control these cookies. Please review the privacy policies of these third parties:
- Google Analytics Privacy Policy
- Stripe Privacy Policy
- Social media platforms (Twitter, LinkedIn)
7. Data Retention
We retain your personal data for as long as necessary to provide services and fulfill the purposes outlined in this policy:
- Active Accounts: Data retained while your account is active
- Inactive Accounts: Retained for 3 years after last activity, then deleted
- Transaction Records: Retained for 7 years for tax and legal compliance
- Marketing Data: Retained until you unsubscribe
- Deleted Accounts: Personal data deleted within 30 days (except where legally required)
8. Your Rights
You have the following rights regarding your personal data:
π Right to Access
Request a copy of your personal data we hold.
βοΈ Right to Rectification
Correct inaccurate or incomplete data.
ποΈ Right to Erasure
Request deletion of your personal data ("right to be forgotten").
βΈοΈ Right to Restriction
Limit how we process your data in certain circumstances.
π¦ Right to Data Portability
Receive your data in a structured, machine-readable format.
π« Right to Object
Object to processing based on legitimate interests or for marketing.
π€ Automated Decision-Making
Right not to be subject to automated decisions with significant effects.
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organizational measures to protect your data:
- SSL/TLS encryption for data transmission
- Encrypted storage of sensitive data
- Regular security audits and updates
- Access controls and authentication
- Employee training on data protection
- Incident response procedures
Note: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. International Data Transfers
Your data may be transferred to and stored in the United States or other countries where our service providers operate. We ensure adequate safeguards are in place:
- Standard Contractual Clauses (SCCs) for EU data transfers
- Adequacy decisions where applicable
- Service provider compliance with GDPR
11. Children's Privacy
XRP Academy is not intended for children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately, and we will delete it.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to Know: What personal information we collect and how it's used
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt-out of the sale of personal information (we do not sell data)
- Right to Non-Discrimination: Equal service regardless of exercising privacy rights
13. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting. We will notify you of material changes via:
- Email notification
- Prominent notice on our website
- In-app notification
Your continued use after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or our data practices:
Email: [email protected]
Address: Eastern Asset Holdings LLC, 30 N Gould St Ste N, Sheridan, WY 82801
Your Privacy Matters: We are committed to protecting your personal data and being transparent about how we use it. If you have any concerns, please don't hesitate to contact us.