Privacy Policy | PunterStat

This Privacy Policy describes how PunterStat ("we", "our", "us") collects, uses, and shares information about you when you use our Platform.

1. Information We Collect

Account information: When you register, we collect your name and email address.

Profile information: You may optionally add a display name, bio, and profile photo.

Usage data: We collect information about how you interact with the Platform — pages visited, courses started, lessons completed, and simulation sessions — to improve your learning experience.

Device & log data: We automatically collect IP address, browser type, device type, and referral URLs when you access the Platform.

Payment data: If you subscribe to a paid plan, payment processing is handled by a third-party provider. We store only your subscription plan, status, and a payment reference — never your full card details.

2. How We Use Your Information

To create and manage your account.
To personalise your learning experience and track your progress.
To send you transactional emails (account confirmation, password reset).
To send educational updates and product news — you can opt out at any time.
To detect, prevent, and address technical issues and abuse.
To comply with legal obligations.

3. Legal Basis for Processing (UK/EEA Users)

Contract performance — to provide the services you signed up for.
Legitimate interests — to improve the Platform and prevent fraud.
Consent — for marketing emails, which you can withdraw at any time.
Legal obligation — where required by applicable law.

4. Data Sharing

We do not sell your personal data. We share data only:

With service providers: Supabase (database & auth), Cloudinary (media hosting), Resend (transactional email). Each is bound by appropriate data processing agreements.
With law enforcement: When required by law or to protect rights and safety.
In a business transfer: In connection with a merger, acquisition, or sale of assets, with notice to affected users.

5. Data Retention

We retain your account data for as long as your account is active. If you request deletion, we will delete or anonymise your personal data within 30 days, subject to retention obligations required by law.

6. Cookies & Tracking

We use strictly necessary cookies to maintain your authenticated session. We do not use advertising cookies or third-party tracking. You can control cookies through your browser settings; disabling session cookies will require you to sign in on every visit.

7. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data ("right to be forgotten").
Object to or restrict certain processing.
Receive your data in a portable format.
Withdraw consent for marketing at any time (unsubscribe link in every email).

To exercise any of these rights, contact us at privacy@punterstat.com. We will respond within 30 days.

8. Security

We implement industry-standard technical and organisational measures to protect your data, including encrypted connections (TLS), hashed passwords managed by Supabase Auth, and row-level security on all database tables. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Children's Privacy

The Platform is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with their data, contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

11. Contact

For privacy questions or to exercise your rights, contact us at privacy@punterstat.com.