Privacy policy

1. What data we collect

• Account data: name, email address, and password. The password is always stored encrypted (hashed), never in plain text.
• Usage data: your progress in courses, the courses you mark as favorites, the ratings and reviews you write, and the contents of your cart.
• Billing data: when you make a purchase or take out a subscription, we keep your order history: amounts, dates, products, transaction identifiers, and subscription status. The charge is processed by Mercado Pago, our external payment processor; Iterixs does not collect or store your full card number, bank credentials, or other payment-instrument details — Mercado Pago collects and safeguards those directly under its own privacy policy.
• Organization data: if you access through an organization (for example, your company or institution), we record your membership in it and the status of your seat.
• Business contact data: if you fill in the business waitlist or contact form, we keep the details you send us (company, contact name, email, estimated team size, and your message) solely to get in touch with you about Iterixs for Business. You can ask us to delete them at any time by writing to the contact address below.
• Technical data: IP address, device and browser type, for security and service-improvement purposes.

2. How we use your data

• To give you access to your account and the courses you enroll in.
• To remember your progress, your favorites, and your cart between sessions.
• To keep the platform secure and prevent abuse.
• To communicate with you about your account or important service changes.
• To securely process payments for paid courses and subscriptions, through Mercado Pago, our specialized external payment processor; Iterixs does not store your full card number.
• To personalize your experience and suggest relevant content —for example, course or learning-path recommendations— based on the courses you are enrolled in, your progress, your favorites, and the path you are following.

3. Communications and marketing

We send you two kinds of emails. Transactional or service emails (for example, account confirmation, purchase receipts, security notices, or important changes) are necessary to provide the service and you cannot unsubscribe from them while your account is active. Marketing or promotional emails (news, course recommendations, or offers) are optional: you can unsubscribe at any time using the cancellation link included in each of them or from your account settings, and we will stop sending them. If you have questions, write to us at contacto@iterixs.org.

4. Cookies and local storage

We use one essential, httpOnly cookie to keep your session signed in securely; this cookie is strictly necessary to provide the service and does not require consent. In addition, if you accept it in the cookie notice, we use Google Analytics to understand in aggregate how the platform is used and to improve it. These analytics cookies are only enabled if you accept them —you can reject them and the platform will keep working— and we configure them with IP anonymization. We do not use advertising cookies.

5. Who we share data with

• With Mercado Pago, our payment processing provider, only the data needed to charge your purchase or subscription securely; Mercado Pago's own handling of that data is governed by its own privacy policy.
• With the infrastructure and content-delivery providers we use to show you the courses —including, where applicable, a video streaming provider—, through temporary, authenticated access.
• If you access through an organization, with that organization's administrator, who can see the status of your seat and your progress in the courses it assigns to you; the organization's use of that information is also governed by that organization's own privacy policy.
• With Google, only if you accept the analytics cookies, to measure platform usage in aggregate (Google Analytics, configured with IP anonymization).
• We do not sell your personal data to third parties for advertising purposes.
• We may share information if the law requires it, or to protect the rights and safety of Iterixs and its users.

6. International data transfers

Iterixs relies on cloud infrastructure providers (for example, Microsoft Azure) and other service providers that may store or process your data on servers located outside your country of residence. When this happens, we take reasonable measures so that your data remains protected in accordance with this policy and applicable law.

7. Security

We apply reasonable technical and organizational measures (encryption in transit, hashed passwords, access control) to protect your information. No system is 100% secure, so we cannot guarantee absolute protection. If a security breach that significantly affects your personal data were to occur, we will take steps to mitigate it and will notify you, and the competent authorities, where the law requires.

8. How long we keep your data

We keep your data while your account is active. You can request the deletion of your account and personal data directly from your Settings page. The final deletion runs 30 days after your request; during that grace period your account keeps working and you can change your mind and cancel the request from the same page. Once the period elapses, the deletion is irreversible: we permanently erase your course progress, your completion records and diplomas (including their public links), and your other personal data (favorites, reviews, notes, notifications), and we anonymize the remaining information. We retain only the information we must keep for legal, accounting, or tax obligations —for example, purchase, payment, and billing records— for the period required by law, already unlinked from your identity.

9. Your rights

Depending on your country of residence, you may have the right to know, access, update, rectify, delete, or export your personal data, as well as to object to certain uses or withdraw your consent. If you reside in Colombia, these habeas data rights are protected by Ley 1581 de 2012, and you may raise queries or complaints with us and, where applicable, with the Superintendency of Industry and Commerce (SIC). You can exercise the right to deletion yourself, with no intermediaries, from your Settings page (see the previous section). To exercise your other rights, write to us at contacto@iterixs.org and we will help you, including obtaining a copy of your data.

10. Minors

Iterixs does not knowingly collect data from children under 13. If you are under 18, you must use the platform with the permission of your parent or legal guardian.

11. Changes to this policy

We may update this Privacy Policy from time to time. If the change is significant, we will announce it on the platform before it takes effect.

12. Contact

If you have questions about this policy or your data, write to us at contacto@iterixs.org.