Privacy Policy | Arsalan Academy

Definitions

To help explain things clearly, every time any of these terms are referenced, they are strictly defined as:

—Cookie: A small amount of data generated by a website and saved by your web browser, used to identify your browser, provide analytics, and remember information such as your login status.
—Company: When this policy mentions "Company," "we," "us," or "our," it refers to Arsalan Academy.
—Personal Data: Any information that directly or indirectly allows for the identification of a natural person.
—Third-party service: Service providers who perform functions on our behalf, including authentication and database hosting (Supabase), payment processing (Stripe), email delivery (Resend), email marketing (Kit), and website hosting and analytics (Vercel).
—Website: Arsalan Academy's site, accessible at https://www.arsalan-academy.com/

Information We Collect

We collect information when you visit our website, register an account, subscribe, submit a contact form, or sign up for our newsletter:

—Email address (required for account creation and newsletter sign-up)
—Password (hashed and stored securely; never visible to us)
—Billing name (optional, entered during Stripe checkout)
—Payment card details (collected and processed by Stripe; we do not store card numbers on our servers)
—Email and message (submitted via the contact form)
—Email address and basic profile info from Google (if signing in with Google OAuth, as permitted by your Google account settings)

How We Use Your Information

We use the information we collect to:

—Create and manage your account
—Process subscription payments
—Send transactional emails (account confirmation, receipts, password reset)
—Send newsletter and marketing emails (only if you have opted in)
—Respond to contact form enquiries
—Improve our website and services based on your feedback and usage

Third-Party Services

We share your personal information only with trusted service providers who perform services on our behalf:

—Supabase: Authentication and database hosting
—Stripe: Payment processing
—Resend: Transactional and marketing email delivery
—Kit (formerly ConvertKit): Email marketing and newsletter management
—Vercel: Website hosting and privacy-focused page view analytics

These providers are given only the information necessary to perform their specific service and are not permitted to use it for other purposes. We may also transfer your information in connection with a merger, acquisition, or sale of all or substantially all of our assets, provided the successor agrees to honor this Privacy Policy. We may disclose information to comply with applicable laws, regulations, or legal process.

Cookies & Tracking

Arsalan Academy uses cookies and similar tracking technologies to keep you logged in and to understand how visitors use our website.

We use session cookies containing signed JWTs (JSON Web Tokens) to maintain your authenticated session. These tokens include your user ID and email address and are used solely to keep you logged in. Without these cookies, you would need to log in on every visit.

We also use Vercel Analytics, a privacy-focused analytics tool, to collect aggregate page view data including visited URLs, referrer, device type, browser, and approximate geographic region. This data is not tied to individual user accounts.

You may disable cookies in your browser settings, but doing so may prevent certain features from working correctly. Disabling a cookie does not delete it — you will need to do this from within your browser's settings menu.

Payment Details

Payment card details are collected and processed exclusively by Stripe and are never stored on our servers. After a transaction, your private payment information is not retained by us.

Data Security

We implement a variety of security measures to protect your personal information. All sensitive information is transmitted via SSL/TLS encryption. Passwords are hashed before storage and are never accessible to us.

Information collected via our website may be transferred to and hosted by our service providers, who may be located in various countries around the world. By using our Service, you consent to this transfer.

We cannot guarantee the absolute security of any information you transmit. Neither people nor security systems are infallible, and we make no warranty of absolute protection.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When we no longer need your data and there is no legal obligation to retain it, we will delete it or depersonalize it.

Your Data Rights

You have the right to access, update, and request deletion of your personal information at any time. To exercise these rights, contact us at info@arsalan-academy.com. We will respond within a reasonable period.

You should be aware that while we will promptly update or delete personal data from active systems, backup copies may persist in non-erasable storage for a limited period.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data only when we have a valid legal basis to do so. Depending on the circumstances, these legal bases may include:

—Performance of a contract, including providing access to your account, subscriptions, and purchased services.
—Consent, including sending newsletters and marketing communications where you have opted in.
—Legitimate interests, including improving, maintaining, securing, and analyzing our services, provided those interests are not overridden by your rights and freedoms.
—Compliance with legal obligations, including recordkeeping, fraud prevention, tax, accounting, and regulatory requirements.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

GDPR

If you are located in the European Economic Area (EEA), the General Data Protection Regulation (GDPR) gives you additional rights regarding your personal data. Personal data under GDPR includes any information that can identify you directly or indirectly — such as your email address, IP address, or financial information.

We process your data only for the specific purposes described in this policy, using the minimum data necessary, and store it only for as long as required. You have the right to access, correct, delete, restrict, or port your personal data. To exercise any of these rights, contact us at info@arsalan-academy.com.

We implement GDPR controls as our baseline standard for all users worldwide, not just those in the EEA.

California Residents (CCPA)

The California Consumer Privacy Act (CCPA) gives California residents additional rights. You may exercise the following rights:

—Right to Know and Access: You may request information about the categories and specific pieces of Personal Information we have collected about you, and how we use and share it.
—Right to Equal Service: We will not discriminate against you for exercising your privacy rights.
—Right to Delete: You may request that we delete the Personal Information we have collected about you.
—Right to Opt Out: You may request that we do not sell your personal data. Note: We do not sell Personal Information.

To exercise any of these rights, contact us at info@arsalan-academy.com. We have one month to respond to your request.

Kids' Privacy

Our Service is not directed to anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you believe your child has provided us with Personal Data, please contact us and we will promptly remove it.

Links to Other Websites

This Privacy Policy applies only to the Arsalan Academy website. Our site may contain links to third-party websites not operated by us. We are not responsible for the privacy practices of those sites. When you leave our site, this Privacy Policy no longer applies.

Governing Law

This Privacy Policy is governed by applicable law. By using Arsalan Academy, you consent to the collection, use, and disclosure of your personal information as described in this policy.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you before material changes take effect. Continued use of the Service after changes become effective constitutes your acceptance of the updated policy.

Contact Us

Don't hesitate to contact us if you have any questions.

Via Email: info@arsalan-academy.com Via this Link: https://www.arsalan-academy.com/contact