Privacy Policy

Last updated: March 24, 2026

1. Data We Collect

When you create an account, we collect your first name, last name, email address, phone number, and country code. We also store your course progress, payment records, and uploaded avatar images.

2. How We Use Your Data

Your data is used solely to provide the educational services offered by DrVoice Academy. This includes managing your account, tracking your course progress, processing payments, and communicating important account-related information.

3. Data Storage & Security

Your data is stored securely in our MongoDB database hosted on MongoDB Atlas. Passwords are hashed using bcrypt and are never stored in plain text. All communications use HTTPS encryption. We apply industry-standard security measures including HTTP security headers, rate limiting, input sanitization, and parameterized queries.

4. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

5. Cookies

We use a single essential HTTP-only cookie for authentication (JWT session token). We do not use tracking cookies, analytics cookies, or any third-party cookies. The session cookie is strictly necessary for the functioning of the website.

6. Third-Party Services

We use the following third-party services:

7. Data Retention

Your data is retained for as long as your account is active. When you delete your account, your personal information is anonymized immediately. Payment records may be retained in anonymized form for financial compliance purposes.

8. Contact

For any privacy-related questions or data requests, please contact us at the email address provided in your account dashboard.