Privacy policy

The data controller is the publisher of the Slonto site, whose contact details appear in the legal notice.

For any question about your data, contact us at: [email protected].

When you create an account: your name, your email address and a password (stored securely and hashed).

When you use the platform: your course enrollments, your progress, your quiz answers, your review cards and your learning activity.

When you make a purchase: payment information is processed by our provider Stripe. We never store your card details.

When you visit: session cookies and a language cookie (see our cookie policy).

When you join the waitlist: your email and optionally your first name.

We process your data to:

— manage your account and provide the services (performance of a contract);

— process your payments and give you access to purchased courses (performance of a contract);

— track your progress and personalise your learning (legitimate interest);

— send you essential account communications (performance of a contract);

— comply with our legal obligations (invoicing, compliance).

Your data is hosted on our servers and may be shared with the following providers, only to the extent necessary:

— Stripe: payment processing;

— Brevo: transactional email delivery;

— Bunny: video hosting.

The creators whose courses you purchase may see your progress information to support their students.

We keep your personal data for as long as your account is active. After your account is deleted, the data is deleted or anonymised, except where the law requires longer retention (for example billing data).

Under the General Data Protection Regulation (GDPR), you have the following rights:

— the right to access your data;

— the right to rectify inaccurate data;

— the right to erasure (“right to be forgotten”);

— the right to restrict processing;

— the right to data portability;

— the right to object to processing;

— the right to withdraw your consent at any time, where applicable.

You can exercise these rights from your account settings (downloading your data and deleting your account), or by contacting us at [email protected]. We respond to any request within one month.

If you believe your rights have not been respected, you can lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.

Some of our providers (in particular Stripe and Bunny) may be located outside the European Union. These transfers are governed by appropriate safeguards, in particular the European Commission standard contractual clauses.

We implement appropriate technical and organisational measures to protect your data: encryption in transit, hashed passwords, access controls.

If you reside in the United Kingdom, your data is also processed in accordance with the UK GDPR and the Data Protection Act 2018. You can lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.

If you are a California resident, the California Consumer Privacy Act grants you, among other things, the right to know the categories of personal data we collect, to request its deletion, and to opt out of any “sale” of your data. We do not sell your personal data.

If you reside in Brazil, your data is also processed in accordance with the Lei Geral de Proteção de Dados (LGPD). You have rights similar to those described above, which you can exercise by contacting us.