Privacy Policy

AMD Academy ("we," "us") is the data controller responsible for your personal data in connection with this website and course. This Privacy Policy explains what we collect, why, and the choices you have. Stripe, our payment processor, handles payment data under its own privacy policy; payment card data is not handled by us.

We collect the following categories of personal data:

• Account data: your email address, password (stored only as a hashed credential), and account role when you register.
• Profile data: display name or full name you provide, account status, and enrollment status.
• Usage & progress data: which modules and lessons you open or mark complete, timestamps, and course progress.
• Entitlement & purchase data: the fact and date of your purchase, the amount paid, currency, any discount code used, and a transaction reference from our payment provider.
• Technical data: IP address, browser and device type, and similar information collected automatically when you visit.
• Support communications: messages you send to us, such as refund or account inquiries.

We do not collect or store your full card number, card security code, or other raw payment credentials.

Payments are processed by Stripe. When you check out, Stripe collects and handles your payment information — including card details and billing address — in accordance with its own privacy policy. This data is transmitted directly to Stripe and never passes through or is stored on our servers. Stripe provides payment processing, receipts, and refund handling for our sales.

We use your personal data to:

• Create and manage your member account and authenticate your sessions;
• Grant and verify access to the course you purchased, including discount-code redemptions;
• Track and display your lesson and module progress;
• Process and fulfill orders, and respond to billing, refund, and chargeback inquiries;
• Provide customer support and respond to your messages;
• Secure the Service, detect and prevent fraud, abuse, and unauthorized access;
• Improve, maintain, and develop the course and platform; and
• Comply with our legal and tax obligations.

Our legal bases for processing include contract performance (providing the account and access you requested), legitimate interests (security and service improvement), and legal obligation (tax and record-keeping).

We share personal data only with the following categories of recipients:

• Payment processor (Stripe): for processing payments, receipts, and refunds.
• Hosting & infrastructure providers: that host the website, database, and authentication services.
• Professional advisers: such as legal and accounting providers where necessary.
• Authorities: where required by law, court order, or to protect rights and safety.

We do not sell your personal data to third parties.

We retain your account and entitlement data for as long as your account is active or as needed to provide the Service. Usage and progress data is kept while your account exists and is deleted or anonymized when your account is closed and no longer needed. Transaction and tax records are retained for as long as required by applicable accounting and tax law.

We take reasonable technical and organizational measures to protect your personal data, including encrypted transmission (HTTPS), hashed passwords, access controls, and database row-level security so members can access only their own records. However, no system is perfectly secure, and we cannot guarantee absolute security.

Payment data is protected by Stripe and held to its own security and PCI-compliance standards rather than by us.

We use essential cookies and local storage to keep you signed in and remember your progress. We may use analytics tools to understand how the Service is used. You can control or delete cookies through your browser settings; disabling essential cookies may affect your ability to sign in or use the Service.

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the processing of your personal data, object to processing, request data portability, and withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us through our support channels. We will respond within a reasonable period, generally within one month.

Your data may be processed in a country other than your own, including by our hosting and payment providers. Where this occurs, we rely on appropriate safeguards such as standard contractual clauses or the provider's compliance with recognized data protection frameworks.

The Service is not directed to children under 18, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review it periodically.

If you have any questions about this Privacy Policy or your personal data, please contact us through our support team.