Privacy Policy
We collect the minimum data needed to operate this service and improve learning outcomes.
Effective date: 2026-01-12 • Applies globally
Overview
This page explains what we collect, why we collect it, the choices you have, and how to contact us.
Information we collect
- Account data you submit (name, email).
- Course progress stored locally on your device when possible.
- Cookie consent preferences (local storage).
- Support messages and feedback you voluntarily provide.
- Technical events (for reliability and abuse prevention) such as IP address, device/browser type, timestamps, and error logs. These are minimized and retained briefly.
We do not collect sensitive categories of personal data unless you explicitly provide them for a clear purpose and consent, where required.
How we use data
- Operate accounts and enrollments you request.
- Improve course quality and accessibility.
- Respond to support messages.
- Prevent fraud, security incidents, and misuse.
- Comply with legal obligations and enforce terms.
We never use your content to train third‑party models. Optional analytics, if enabled, are anonymized and aggregated.
Legal bases
If you are in the EEA/UK/Switzerland, we process personal data under these lawful bases:
- Contract: to provide the service you request.
- Legitimate interests: to secure and improve the platform. We balance this against your rights.
- Consent: for optional features such as analytics or marketing (where offered).
- Legal obligation: to comply with applicable laws.
Retention
We keep data only as long as needed for the purposes described or as required by law. Typical periods:
- Account data: for the life of your account; deleted within a reasonable time after closure.
- Support logs: up to 24 months for quality and dispute resolution.
- Security logs: short-term rolling windows (typically 30–180 days) unless investigating issues.
Security
We use industry-standard safeguards including encryption in transit, least-privilege access, audit logging, and routine backups. No system is 100% secure; please use a strong, unique password and keep your login details safe.
International transfers
Where data move across borders, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) and, where applicable, adequacy decisions.
Your choices and rights
- Access, correct, or delete your data.
- Portability of data you provided.
- Restrict or object to certain processing.
- Withdraw consent for optional analytics.
- Opt-out of marketing communications (where applicable).
Region-specific
- EEA/UK/CH: you may lodge a complaint with your Data Protection Authority.
- California (CCPA/CPRA): right to know, delete, correct, and opt out of sale/share; no discrimination for exercising rights.
- Brazil (LGPD): confirmation of processing, access, correction, anonymization, portability, deletion, and information about sharing.
To exercise rights, email [email protected]. We will verify your request and respond within required timeframes.
Children
Calvento is not directed to children under the age where parental consent is required in your region. If we learn we collected personal data from a child without appropriate consent, we will delete it.
Contact
Questions? Email [email protected]. Reference: calvento.pro
If we make material changes to this policy, we will update this page and adjust the effective date.