At Ludwitt, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the platform.
1. Information We Collect
1.1 Personal Data
We may collect personal identification information from you in a variety of ways, including, but not limited to:
- Account creation information (name, email address, password)
- Profile information (educational background, interests)
- Payment information (processed through secure third-party payment processors)
- User-generated content you provide on our platform
- Information you provide in communications with us
1.2 Usage Data
We automatically collect certain information when you visit, use, or navigate the platform. This information does not reveal your specific identity but may include:
- Device information (browser type, IP address, device type)
- Log data (pages visited, time spent, referring websites)
- Learning patterns and progress
- Feature usage statistics
1.3 Cookies and Tracking Technologies
We use cookies, web beacons, and similar tracking technologies to collect and store information about your interactions with our platform. You can control cookies through your browser settings. See our Cookie Policy for more details.
2. How We Use Your Information
We use the information we collect for various purposes, including but not limited to:
- Providing, maintaining, and improving our platform
- Processing your account registration and transactions
- Personalizing your learning experience
- Analyzing usage patterns to enhance our services
- Communicating with you about your account, updates, or promotional materials
- Responding to your inquiries or support requests
- Detecting, preventing, and addressing technical or security issues
- Complying with legal obligations
3. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:
- Account Information: We retain your account information for as long as your account is active and for a reasonable period thereafter in case you decide to reactivate our services.
- Learning Data: We retain your learning history and progress for as long as your account is active to provide personalized learning experiences.
- Payment Information: We retain payment records for 7 years for tax, accounting, and legal compliance purposes.
- Communications: We retain customer service communications for 2 years to improve our services and for legal compliance.
- Usage Data: We retain aggregated usage data for up to 5 years for analytics and product improvement.
When we no longer need personal information, we securely delete or anonymize it. Anonymized information may be retained indefinitely for analytics purposes.
4. How We Share Your Information
We may share your information in the following situations:
- Service Providers: We may share your information with third-party vendors, service providers, and other partners who perform services on our behalf.
- Business Transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
- With Your Consent: We may share your information with your consent or at your direction.
We do not sell your personal information to third parties.
5. Data Security
We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security.
5.1 Security Measures
Our security measures include:
- Encryption of data in transit using TLS
- Encryption of sensitive data at rest
- Regular security assessments and penetration testing
- Access controls and authentication requirements
- Regular security training for our team
- Physical security measures for our servers and offices
6. Your Data Rights
Depending on your location, you may have certain rights regarding your personal information, including:
- Right to access and receive a copy of your personal information
- Right to rectify inaccurate personal information
- Right to request deletion of your personal information
- Right to restrict or object to processing of your personal information
- Right to data portability
- Right to withdraw consent
To exercise these rights, please use our Data Request Form below or contact us at privacy@ludwitt.com.
6.1 Response Timeline
We will respond to all legitimate data rights requests within 30 days. In certain circumstances, we may extend this period to 60 days, in which case we will inform you of the reason for the delay.
7. Region-Specific Privacy Information
7.1 European Users (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional information applies:
- Legal Basis for Processing: We only process your personal data when we have a valid legal basis, including:
- When you have given consent
- When processing is necessary for the performance of a contract
- When processing is necessary for compliance with a legal obligation
- When processing is necessary for our legitimate interests
- Data Controller: Ludwitt, Inc. is the data controller of your personal information.
- Data Protection Officer: You can contact our Data Protection Officer at dpo@ludwitt.com.
- Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.
7.2 California Residents (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights:
- Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purpose of collection, and the categories of third parties with whom we share your information.
- Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
- Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal information for cross-context behavioral advertising.
- Right to Limit: You have the right to limit the use and disclosure of sensitive personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
In the preceding 12 months, we have collected the categories of personal information described in Section 1. We do not sell personal information to third parties. We may share your personal information with service providers as described in Section 4.
7.3 Other Regions
We comply with privacy regulations in other regions where our users are located, including but not limited to:
- Canada: We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA).
- Australia: We comply with the Privacy Act 1988 and the Australian Privacy Principles.
- Brazil: We comply with the Lei Geral de Proteção de Dados (LGPD).
8. International Data Transfers
Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction. We take appropriate safeguards to ensure that your data is treated securely and in accordance with this Privacy Policy.
8.1 Transfer Mechanisms
When transferring data from the EEA, UK, or Switzerland to countries that do not have an adequacy decision, we rely on one or more of the following legal mechanisms:
- European Commission-approved Standard Contractual Clauses
- Binding Corporate Rules for transfers within our corporate group
- Consent of the individual (in limited circumstances)
- Necessity for the performance of a contract
9. Children's Privacy
Our platform is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so that we can take appropriate action.
10. Third-Party Links
Our platform may contain links to third-party websites or services that are not owned or controlled by Ludwitt. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date and version number. For significant changes, we will provide a more prominent notice or send you an email notification. You are advised to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Email: privacy@ludwitt.com
Address: 123 Philosophy Way, San Francisco, CA 94105, United States
Data Protection Officer: dpo@ludwitt.com