Privacy Policy

1. Who We Are

Educos is an online course creation and sales platform. We are the controllers of the personal data collected through our services.

For privacy-related questions, please contact our Data Protection Officer (DPO) at privacy@educos.online.

2. Data We Collect

Data you provide directly:

• Registration data: name, email address and password;
• Profile data: photo, bio, professional information;
• Payment data: billing information (we do not store card data — processed by secure gateways);
• Created content: courses, materials, messages and platform interactions.

Data collected automatically:

• Usage data: pages visited, courses accessed, video viewing time;
• Technical data: IP address, browser type, operating system, device identifiers;
• Cookies and similar technologies: for platform operation and performance analytics.

3. How We Use Your Data

• Service delivery: creating and managing your account, processing enrollments and payments, issuing certificates;
• Communication: sending transaction confirmations, important service updates and course-related notifications;
• Personalization: adapting the platform experience to your preferences and usage history;
• Security: detecting and preventing fraud, abuse and security breaches;
• Service improvement: analyzing how the platform is used to develop new features;
• Legal compliance: meeting applicable legal and regulatory obligations.

4. Legal Basis for Processing

• Contract performance: to provide the contracted services;
• Consent: for sending marketing communications (you may withdraw at any time);
• Legitimate interest: for service improvements, fraud prevention and platform security;
• Legal obligation: when required by law.

5. Data Sharing

We do not sell your personal data. We may share it only in the following situations:

• Service providers: companies that help us operate the platform (hosting, payment processing, email delivery), bound by confidentiality obligations;
• Course creators: instructors have access to basic data of students enrolled in their courses (name and progress) for educational purposes;
• Legal obligation: when required by court order, government authorities or applicable law;
• With your consent: in any other situation, with your express authorization.

6. Cookies

We use cookies and similar technologies to ensure the proper functioning of the platform, remember your preferences (such as language and theme) and analyze service usage.

You may configure your browser to refuse cookies, but this may affect the functionality of some platform features.

Types of cookies used:

• Essential: necessary for platform operation (session, authentication);
• Functional: remember your language and theme preferences;
• Analytical: help us understand how the platform is used to improve it.

7. Your Rights

You have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you;
• Correction: correct incomplete, inaccurate or outdated data;
• Erasure: request deletion of data that is no longer necessary or processed unlawfully;
• Portability: receive your data in a structured format for transfer to another service;
• Withdrawal of consent: revoke permissions granted at any time;
• Objection: object to processing based on legitimate interest.

To exercise any of these rights, contact us at privacy@educos.online. We will respond within 15 business days.

8. Data Retention

We retain your data for as long as necessary to provide the services and meet legal obligations. After account closure:

• Account data is deleted or anonymized within 90 days;
• Financial transaction data is retained for 5 years as required by law;
• Security logs are retained for 6 months;
• Issued certificates may be retained indefinitely for verification purposes.

9. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction or unlawful disclosure, including:

• Encryption of data in transit (TLS/HTTPS);
• Secure password storage with bcrypt hashing;
• Role-based access control;
• Continuous security monitoring;
• Regular backups and data redundancy.

10. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect data from minors under 18 without parental consent. If we become aware that we have collected data from a minor without proper consent, we will delete that information immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or by a prominent notice on the platform. The "last updated" date at the top of this document indicates when the most recent version was published.

12. Contact

To exercise your rights, clarify questions or report privacy concerns: