Privacy Policy

1. Introduction

This Privacy Policy explains how KGA TECH FZ LLC (“we”, “us”, “our”) collects, uses, and protects your personal data when you use Quasar Academy at quasaracademy.dev. By using our platform, you consent to the practices described in this policy.

2. Data We Collect

We collect the following categories of personal data:

Account Information

• Email address
• Discord username and Discord user ID
• Display name and avatar (from Discord)

Payment Information

• Payment card details are processed directly by Stripe. We do not store your full card number, CVV, or expiration date.
• We store a Stripe customer ID, subscription status, and transaction history.

Usage Data

• Pages visited, features used, and time spent on the platform
• Course progress, lesson completions, and quiz results
• Device type, browser type, IP address, and approximate location
• Referral source and landing page

3. How We Use Your Data

• Account management: to create and maintain your account, authenticate your identity, and manage your subscription.
• Service delivery: to provide access to courses, community features, live sessions, and downloadable resources.
• Communication: to send transactional emails (purchase confirmations, password resets, subscription updates) and, with your consent, educational and promotional communications.
• Analytics: to understand how users interact with the platform, improve our content, and optimize the user experience.
• Fraud prevention: to detect and prevent unauthorized access, abuse, or fraudulent activity.
• Legal compliance: to comply with applicable laws, regulations, and legal processes.

4. Third-Party Services

We share data with the following third-party services, each of which has its own privacy policy:

• Stripe— payment processing. Stripe receives your payment card details directly and processes transactions on our behalf.
• Resend— email delivery. Resend processes your email address to deliver transactional and marketing emails.
• Vercel— hosting and deployment. Vercel may process your IP address and request metadata as part of serving the application.
• Turso (libSQL) — database hosting. Your account data and usage records are stored in our Turso-hosted database.
• Discord— authentication. We use Discord OAuth to verify your identity and retrieve your username and avatar.
• PostHog— product analytics. PostHog collects anonymized usage data to help us understand how the platform is used.

5. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

• Essential cookies: required for authentication, session management, and core platform functionality.
• Analytics cookies: used by PostHog to collect anonymized usage data and improve the platform experience.
• Preference cookies: to remember your settings and display preferences.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the platform.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 90 days for backup and recovery purposes, and as required by law (e.g., financial records for tax compliance). Anonymized analytics data may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data, subject to legal retention requirements.
• Portability: request your data in a structured, machine-readable format.
• Objection: object to processing of your data for marketing purposes.
• Restriction: request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at hello@quasaruniversity.com. We will respond within 30 days.

8. GDPR Compliance

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases: (a) your consent, (b) performance of a contract (providing the services you subscribed to), (c) legitimate interests (improving our platform and preventing fraud), and (d) legal obligations. You have the right to withdraw consent at any time by contacting us. Data transfers outside the EEA are protected by appropriate safeguards, including standard contractual clauses.

9. Children's Privacy

Quasar Academy is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at hello@quasaruniversity.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the platform. Your continued use of Quasar Academy after such changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at hello@quasaruniversity.com.

KGA TECH FZ LLC
United Arab Emirates