Privacy Policy

1) Data Controller

• Klasyo
• PAUL Rolph Myrtil Richecardy
• Email: admin@klasyo.com
• 16 rte de Gros-Jean, Rue Chavanne Prolongée, PV, Haiti

2) What Data We Collect

• Registration: email (required); name (optional); registration date; user role (buyer/creator).
• Creator Profile: photo, bio, description; social links; KYC documents (if needed).
• Transactions & Orders: purchase/sales history; MonCash payment proof (ID, amount, date); order status.
• Usage: pages/courses viewed, progress, ratings & comments; limited technical data for security (browser, device; IP may be logged temporarily in security logs).

3) Legal Basis

• Contract Performance (create account, buy/sell, access, support).
• Consent (newsletter, marketing coms, non-essential cookies).
• Legitimate Interest (security, anti-fraud, anonymous stats, improvement).
• Legal Obligation (accounting, KYC for creators).

4) How We Use Data

• Service: account management, purchase & access, content moderation.
• Communication: email/WhatsApp confirmations, receipts, support, updates.
• Security: identity verification, fraud/abuse detection, security monitoring, legal compliance.
• Improvement: performance analysis, new features, anonymous stats.
• MonCash Payment: We do not store payment methods. We receive Transaction ID, amount, status to confirm order. During beta, verification may be manual with ID.

5) Security & Storage

• TLS/HTTPS for all connections; limited access rights ("need to know").
• Data stored on Supabase; site on Vercel; security monitoring measures.
• International transfer possible (US/EU) depending on providers; we apply contractual & technical measures to protect data.

6) Technical Sub-processors (Limited Sharing)

• Supabase (Auth/DB/Storage), Vercel (hosting), Umami (anonymous audience), email/msg services for notifications.
• We sign confidentiality/security agreements; they cannot use data for their own interests.

7) Data Sharing

We do not sell your personal data. We share only as necessary for service or required by law.

You have rights: access, correct, delete, limit, object, portability, and withdraw consent.

8) Your Rights & How to Exercise

Email admin@klasyo.com (we may ask for ID proof). We reply within 30 days. You can initiate via WhatsApp, but we finalize via secure email.

9) Cookies & Tracking

• Essential: for session & security.
• Analytics (Umami): anonymous, not used for ads, respects Do Not Track.
• No ad cookies or cross-site tracking.
• You will find a preferences panel to manage non-essential cookies.

10) Data Retention

• Active Account: as long as account is active.
• After Deletion: 12 months (minimum security logs).
• Purchase/Sales History: 7 years (accounting).
• Creator KYC: 5 years after account closure.
• Technical & Security Logs: 12 months.
• Support Tickets: 24 months.
• Anonymous Collective Stats: unlimited (100% anonymous).

11) Security Incidents

If an incident affects your data, we will notify you rapidly, with protection recommendations and corrective measures.

12) Changes to Policy

We may update this policy; current version date is at top of page; for major changes we send important notification.

13) Privacy Contact

• Email & all inquiries: admin@klasyo.com
• WhatsApp: +509 4404-0014