Privacy Policy

1. Who is responsible for your data

The data controller for the Excellence University Services is Juan Carlos Pereyda Villa, a sole trader registered in Mexico as a persona física con actividad empresarial (RFC PEVJ850228R19), trading as Safa Studios and Excellence University. Our registered address is Valle de la Luna 2, Zibatá, El Marqués, Querétaro, 76269, Mexico. For any privacy question, contact privacy@excellenceuniversity.org. We have not appointed a Data Protection Officer, as we are not required to do so.

2. Information we collect

• Account data: name, email, handle, headline, locale, and password (stored hashed).
• Purchase data: programs and memberships you buy, billing records, and the last digits and type of your payment method. We do not store full card numbers.
• Learning activity: course progress, journey data, bookmarks, event attendance, certificates, and leaderboard standing.
• Community content: posts, messages, and other content you submit.
• AI interactions: prompts and conversations with AI features such as the AI mentor.
• Technical data: IP address, device and browser information, and usage data collected through cookies and similar technologies.

3. How we use your information

• to provide, operate, and improve the Services;
• to process payments, renewals, and refunds;
• to deliver courses, community access, events, and AI features;
• to communicate with you about your account, transactions, and support requests;
• to send marketing communications where permitted, which you can opt out of at any time;
• to maintain security, prevent fraud, and comply with legal obligations.

4. Legal bases

Where data protection law such as the GDPR applies, we rely on the following legal bases: performance of our contract with you to deliver the Services, your consent for optional communications and certain cookies, our legitimate interests in operating and securing the Services, and compliance with legal obligations.

5. Service providers and processors

We share data with trusted providers who process it on our behalf, under contract, including:

• Payments: Stripe, which processes your payment and may present it in your local currency. We never receive or store your full card details.
• Hosting and database: Vercel (application hosting and content delivery) and Supabase (authentication and Postgres database).
• Email: Resend, for transactional email such as verification, receipts, and course notifications.
• AI providers: Anthropic, which powers the AI mentor. Your conversations with the mentor are sent to Anthropic to generate a response.
• Analytics: We do not currently use a third-party analytics provider.

We do not sell your personal data.

6. International transfers

Because we operate internationally, your data may be transferred to and processed in countries other than your own. Where required, we use appropriate safeguards such as the European Commission Standard Contractual Clauses. Our providers process data principally in the United States and the European Union. We are established in Mexico, which the European Commission has not designated as providing an adequate level of protection, so transfers to us rely on those safeguards.

7. Data retention

We keep your data for as long as your account is active and as needed to provide the Services, then for the periods required to meet legal, accounting, and tax obligations. In practice: account and learning records are kept while your account is active and for 12 months after you close it; billing and invoice records are kept for 5 years to meet Mexican tax requirements; support correspondence is kept for 24 months; and AI mentor conversations are kept for 12 months.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your data, to object to certain processing, and to withdraw consent. To exercise these rights, contact privacy@excellenceuniversity.org. You also have the right to lodge a complaint with your local data protection authority. In Mexico this is the responsible federal transparency and data protection authority; in the European Union it is the supervisory authority of the country where you live.

9. Cookies

We use cookies and similar technologies for sign-in sessions, preferences, security, and, where applicable, analytics. You can control non-essential cookies through your browser or any cookie settings we provide. We currently set only cookies that are strictly necessary to sign you in and keep your session secure, so no consent banner is shown. If we later add analytics or marketing cookies, we will ask for your consent first.

10. Children

The Services are not directed to children under 18, and we do not knowingly collect their data. If you believe a child has provided us data, contact us so we can delete it.

11. Security

We use technical and organizational measures designed to protect your data. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice.

13. Contact

For privacy questions, contact privacy@excellenceuniversity.org, or write to Valle de la Luna 2, Zibatá, El Marqués, Querétaro, 76269, Mexico.