Privacy Policy

Adpancho SRL, VAT no. RO00000000, București, România. Data protection contact: contact@adpancho.com.

• Order data (name, email, seminar, amount) — to perform the contract and for invoicing. Legal basis: Art. 6(1)(b) and (c) GDPR.
• Account data (email, name, hashed password, lesson progress) — to provide the service. Legal basis: Art. 6(1)(b).
• Anti-fraud technical data — device identifiers and IP addresses are stored exclusively as cryptographic hashes (never in plain form), together with viewing session logs and security events. Legal basis: legitimate interest, Art. 6(1)(f) — protecting the licensed content and preventing fraud.
• Viewing watermark — your name, partially masked email, order number and a session code are displayed over the video during playback, to deter and identify unauthorised copying. Legal basis: legitimate interest, Art. 6(1)(f).
• Marketing communications — only with explicit, separate consent given at checkout (Art. 6(1)(a)); you can withdraw it at any time.

We never store card details (payments are fully processed by Revolut). In our internal logs email addresses appear masked and IP addresses only as hashes. We collect strictly the data needed for the purposes above.

• Supabase (database hosting and authentication);
• Revolut Bank UAB (payment processing);
• VdoCipher (secure video delivery);
• Resend (transactional email);
• Vercel (application hosting).

Where transfers outside the EEA exist, they rely on standard contractual clauses.

• invoicing data: as required by tax law (up to 10 years);
• account and progress data: for as long as the account exists;
• security and session logs: up to 12 months;
• email logs: up to 12 months.

You have the right of access, rectification, erasure ("right to be forgotten"), restriction, portability and objection, as well as the right to withdraw consent. To exercise them — including exporting or deleting your account — write to contact@adpancho.com; we reply within 30 days. You may also contact your national data protection authority (in Romania: ANSPDCP, dataprotection.ro).

We use encryption in transit (TLS), row-level security policies in the database, security logging and need-to-know access to data. Passwords are stored exclusively as hashes.