Legal
Privacy Policy
Last updated: July 19, 2026
This Privacy Policy explains how {{LEGAL_ENTITY_NAME}} ("we") processes personal data when you use FinSage Academy. Our registered address is {{PHYSICAL_ADDRESS}}. You can contact us at support@finsage.academy.
1. Data we collect
- Account data: name, email, phone number, password hash.
- Order data: products purchased, amounts, order reference, transaction status.
- Usage data: pages visited, lessons completed, device and IP metadata.
- Communications: messages you send us via email, WhatsApp or forms.
2. Purpose & legal basis
We process your data to (a) provide the Services and fulfil orders, (b) send transactional emails, (c) provide customer support, (d) improve the platform, (e) comply with legal obligations. Our legal bases are contract, legitimate interest, and consent where required.
3. Third-party processors
- Paystack — payment processing.
- Lovable Cloud (Supabase infrastructure) — database, authentication and file storage.
- Resend — transactional email delivery.
- Vercel / Cloudflare — hosting and CDN.
Each processor is bound by their own security and privacy commitments.
4. Retention
We retain account and order data for as long as your account is active and for up to 7 years after closure to comply with tax and accounting laws. You may request earlier deletion; see below.
5. Your rights
Depending on your jurisdiction (GDPR, LGPD, POPIA, NDPR) you have the right to access, rectify, delete, restrict or port your data, and to object to certain processing. To exercise any right, email support@finsage.academy.
6. Cookies
We use essential cookies for authentication and site functionality, and analytics cookies to understand aggregate usage. You can disable non-essential cookies via the cookie banner or your browser settings.
7. Security
Data in transit is encrypted using TLS. Passwords are hashed. Access to production data is limited to authorised personnel and logged.
8. Changes
We may update this Policy from time to time. Material changes will be notified via email or a prominent notice on the site.