RaveMy Privacy Policy
We are committed to safeguarding your personal data, being transparent about our data practices, and ensuring you retain full control over your learning journey.
Zero Data Selling
We never monetize, rent, or trade your personal records, contact details, or learning activity to third-party data brokers.
Enterprise-Grade Security
All communications and credentials are encrypted in transit via TLS 1.3 and at rest with AES-256 protocols.
User Autonomy & Control
Export your complete learning records, update preferences, or request permanent data erasure at any time.
Introduction and Scope
Welcome to RaveMy ("we", "our", "us"). We provide an interactive learning, skill development, and career advancement platform. We are deeply committed to protecting your personal data, respecting your privacy preferences, and maintaining full transparency across all aspects of our data handling practices.
This Privacy Policy outlines how RaveMy collects, processes, stores, and protects personal information when you access or interact with our website, web applications, APIs, communication channels, and associated educational services (collectively, the "Platform").
By registering an account, enrolling in coursework, or interacting with our platform, you acknowledge the collection and use of your data in accordance with the terms laid out in this document.
Information We Collect
We collect information necessary to deliver high-quality educational experiences, maintain platform security, process transactions, and satisfy our regulatory obligations.
| Category | Data Points Collected | Purpose & Context |
|---|---|---|
| Account & Profile | Full name, email address, password hash, profile avatar, professional headline, bio. | Account creation, authentication, student identification, community interactions. |
| Academic & Learning | Enrolled courses, lesson completions, quiz submissions, assignment scores, certificate records. | Tracking curriculum progression, awarding credentials, adaptive learning recommendations. |
| Billing & Payments | Billing address, transaction history, currency, masked payment token (last 4 digits). | Processing course fees and subscriptions via PCI-DSS certified payment processors (Stripe/Paystack). RaveMy does not store raw card numbers. |
| Technical & Usage | IP address, browser type, device identifiers, operating system, page views, session duration. | Platform telemetry, security auditing, fraud prevention, and performance diagnostics. |
Direct Submissions
- Information submitted when you complete your student profile, upload projects, or participate in peer discussions.
- Inquiries, bug reports, and messages sent directly to our support or academic advisory teams.
- Responses to platform satisfaction surveys, feedback questionnaires, or research interviews.
Automated Data Collection
- Operational telemetry captured during platform navigation and media playback.
- Authentication logs, failed login tracking, and rate-limiting monitors to safeguard your account against unauthorized access.
How We Use Your Information
Every piece of information we collect is tied to a specific operational, educational, or legal purpose. We do not engage in automated decision-making that produces legal effects concerning you.
Operational Objectives
- Delivering and maintaining uninterrupted access to course content, interactive exercises, and mentorship boards.
- Generating and verifying cryptographically signed certificates of completion.
- Facilitating customer support inquiries and resolving platform technical difficulties.
- Sending critical transactional communications, such as account confirmations, password resets, enrollment confirmations, and security notices.
- Detecting, preventing, and investigating potential fraudulent transactions, unauthorized access, or violations of our Terms of Service.
Third-Party Integrations and Data Sharing
We only disclose personal data to vetted service providers who act strictly on our instructions and under contractual data protection obligations that meet or exceed standard regulatory requirements.
Authorized Service Providers
- Payment Infrastructure: Certified payment gateways (Stripe, Paystack) to securely process payments without storing sensitive card details on our servers.
- Cloud Infrastructure: Enterprise cloud hosting and content delivery networks (AWS, Vercel) for encrypted data storage and low-latency asset delivery.
- Transactional Email & Messaging: Trusted communication APIs (Brevo) for delivering crucial system notifications, invoices, and password resets.
- Analytics & Telemetry: Privacy-conscious analytics platforms configured to anonymize IP addresses and strip personally identifiable attributes.
Legal Disclosures
- We may disclose records if required by applicable statutory law, court subpoenas, or governmental regulatory orders.
- In the event of a merger, acquisition, or restructuring, user data may be transferred subject to the same protections guaranteed in this Privacy Policy.
Data Security and Protection Protocols
We implement defense-in-depth security architectures designed to protect your personal data against accidental loss, unauthorized access, alteration, or disclosure.
All web traffic between your browser and RaveMy servers is encrypted using modern Transport Layer Security (TLS 1.3). Database stores and sensitive assets are encrypted at rest using AES-256 standards.
Key Safeguards
- Role-Based Access Control (RBAC): Employee access to production databases is strictly restricted on a least-privilege basis.
- Tokenized Session Management: Authentications utilize secure, encrypted JSON Web Tokens (JWT) stored in HTTP-only cookies.
- Continuous Vulnerability Assessments: Routine dependency auditing, continuous integration security gates, and regular penetration testing.
Data Retention and Account Lifecycles
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, provide you with ongoing platform services, resolve disputes, and comply with legal or accounting requirements.
When an account is deleted upon user request, all identifiable information—including your profile, email address, and direct submissions—is permanently purged or irreversibly anonymized within 30 days, except where statutory financial retention laws mandate maintaining transaction logs for auditing purposes.
Your Rights and Controls
Regardless of geographic location, we respect your right to control your personal data. Users residing in the European Economic Area (under GDPR), the United Kingdom, California (under CCPA/CPRA), or comparable jurisdictions possess specific statutory rights.
Exercisable Rights
- Right to Access: Request a structured, machine-readable export of all personal data held concerning your account.
- Right to Rectification: Correct inaccurate or incomplete profile records directly via your account settings.
- Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your account and associated records.
- Right to Restriction: Request temporary restriction of data processing during dispute resolutions.
- Right to Opt-Out: Unsubscribe from non-essential educational newsletters and platform announcements with one click via the email footer.
Children's Privacy and International Transfers
RaveMy does not knowingly collect or solicit personal information from individuals under the age of 13 (or under 16 where required by local jurisdiction). If we learn that we have inadvertently collected data from a child below the statutory threshold without verified parental consent, we will immediately take steps to purge that data.
RaveMy operates infrastructure globally. If you access the Platform from regions with differing data governance legislation, please be aware that your data may be transferred to and processed in countries where our server providers operate, utilizing Standard Contractual Clauses (SCCs) to ensure equivalent protection.
Policy Updates and Contact Information
We may update this Privacy Policy periodically to reflect technological advancements, new platform capabilities, or legal requirements. When substantive revisions occur, we will notify registered learners via email or through prominent platform notices prior to the changes taking effect.
The "Last Updated" timestamp at the top of this document indicates the effective date of the current version.
Questions or Data Requests?
If you have any questions, concerns, or requests regarding this Privacy Policy or our data management protocols, our dedicated Data Protection officer and support team are available to help.