1. Introduction
Welcome to OxyLesson (the "Service"), operated by Oxycon ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about our policy, or our practices with regards to your personal information, please contact us at [email protected].
This Privacy Policy describes how we collect, use, and share your personal information when you visit our website, use our mobile application, or otherwise interact with us. By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
We collect information that you provide to us directly, as well as information generated by your use of the Service.
Personal Information You Provide:
- Account Data: Name, email address, password, and profile settings.
- User Content: Flashcards, decks, images, notes, and other learning materials you create or upload.
- Payment Data: Billing address and payment method details (processed by our payment partners).
- Communications: Content of messages you send to us for support or feedback.
Information Automatically Collected:
- Usage Data: Pages visited, time spent, features used, and learning progress statistics.
- Device Data: IP address, browser type, device model, operating system, and unique device identifiers.
- Cookies: Data collected via cookies as described in our Cookie Policy.
3. How We Use Information
We use the information we collect for the following purposes:
- Service Provision: To provide, operate, and maintain the OxyLesson platform and your account.
- Personalization: To customize your learning experience and track your progress.
- Improvement: To analyze usage patterns and improve our features, content, and user experience.
- Communication: To send you updates, security alerts, and support messages.
- AI Features: To power AI-driven features such as automatic card generation and content suggestions.
- Security: To monitor and prevent fraudulent or abusive activity.
Payment Information
Security First: We do not collect or save your credit card information. All payment processing is handled securely by our trusted payment processors.
When you use your card to subscribe to our Application or purchase subscriptions, payment processing is handled entirely by our payment processors. We only receive limited payment card details such as the last four digits of your card, the country of issuance, and the card's expiration date.
Our Payment Partners:
- Stripe - Primary payment processing
- Braintree - Alternative payment processing
- PayPal - PayPal payments
- Przelewy24 - European payments
- iMoje - Regional payment solutions
- InFakt - Invoicing and tax handling
Information Disclosure
We will not sell or rent your personally identifiable information to third parties without your express consent. The following outlines how your information might be disclosed in the regular course of business:
Types of Information Sharing:
Anonymized Aggregated Data
We aggregate and anonymize data for analytics and improvement purposes. Under these circumstances, we do not disclose any information that could be used to personally identify you.
Learning Data Sharing
We may share non-sensitive learning progress data with other users in collaborative learning scenarios, excluding any personally identifiable information.
Service Providers & Partners
We work with trusted service providers for hosting, order processing, and advertising. We exercise due diligence to employ service providers that meet our expectations for handling confidential information securely.
Legal Requirements
We cooperate with law enforcement inquiries and legally enforced requests for information. We may disclose personal information in response to governmental investigations, court orders, subpoenas, or to comply with applicable laws and regulations.
Retention of Your Personal Information
We retain personal information related to you or your use of the Services as long as your Account is active or as required to offer you or our Users the Services. We also retain personal information as necessary to fulfill the purposes outlined in this Privacy Policy.
Retention Factors:
- Minimum required retention period mandated by law
- Period within which legal claims can be made
- Whether information has been aggregated or pseudonymised
- Business and operational requirements
Account Deletion: You may delete your Account by contacting us at [email protected], and we will erase the personal information we hold about you, unless required for legal purposes.
Security
We take reasonable administrative, technical, and physical measures to protect your personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. However, no internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.
Children's Privacy
Our Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information. If you become aware that a child has provided us with personal information in violation of this policy, please contact us.
Information Collectors Beyond Our Scope
Unless explicitly stated in this Privacy Policy, this document only discusses the utilization and disclosure of information we gather from you. If you disclose your information to other parties through the Application, including Third-Party Services, different rules could apply to their use, collection, and disclosure of the personal information you share with them.
Since we do not control the policies of third parties regarding information use, collection, or disclosure, you are subject to their privacy policies. It's recommended that you ask questions before disclosing your personal information to others.
European Union, Switzerland, and United Kingdom Rights
If you're located in the EU, Switzerland, or the UK, you have specific data protection rights under applicable privacy laws:
Your Data Rights:
Right to Know
You are entitled to know what personal information we collect and process about you, including the types of information, sources, retention criteria, and sharing practices.
Access Rights
You can request access to your personal information and receive additional details about our processing activities.
Rectification
If your personal information is incorrect or incomplete, you have the right to have it corrected or completed.
Erasure
You are entitled to have your personal information erased when it's no longer necessary for the original purposes or if it was processed unlawfully.
Data Portability
You can request your personal information in a structured, machine-readable format and have it transmitted to another controller.
Right to Object
You have the right to object to the processing of your personal information, particularly for direct marketing purposes.
Legal Basis for Processing:
- Consent: When you voluntarily provide information or register for marketing
- Legitimate Interests: For service improvement and compliance monitoring
- Contractual Obligation: To execute contracts and provide services
- Legal Compliance: To comply with legal and statutory obligations
Data Protection Authority Contacts:
Data Transfer
Your personal information may be transferred to countries different from where you reside, including to servers located in the United States. We maintain appropriate safeguards for your information, but it may be subject to the legal jurisdictions of those countries.
Accessibility for Individuals with Disabilities
We endeavour to ensure access to information related to our Services, including this Privacy Policy, for every individual. If you require this Privacy Policy in an alternative format for accessibility purposes, please contact us and we will aim to accommodate your needs.
Do-Not-Track Signals
Some web browsers may transmit "do-not-track" signals to websites. Due to discrepancies in browser behaviors and activations, it is unclear if users always intend for these signals to be transmitted. Unless mandated by law, we currently do not react to these signals.
Privacy Policy Amendments
We reserve the right to modify this Privacy Policy at any time. We will notify of any changes by updating the "Effective Date" at the top of this policy. Your continued use of the Services following any updates constitutes your acceptance of the revised Policy.
Questions & Contact
Our aim is to ensure our privacy practices are straightforward and comprehensible. If you have any questions, concerns, or require further information, please don't hesitate to reach out to our privacy officer:
Email: [email protected]
Company: OxyLesson - AI-Powered Learning Platform