Privacy Policy

1. Information We Collect

We collect information you provide directly:

• Account information: name, email address, role (student, teacher, parent)
• Purchase information: order history, purchased workbook titles
• Payment information: processed by Stripe — we do not store card numbers

We also collect limited technical data automatically: IP address, browser type, pages visited, and time spent on the platform. This data is used to improve the Service and is not sold to third parties.

2. How We Use Your Information

• To create and manage your account
• To process and fulfill your purchases
• To send transactional emails (order confirmations, password resets)
• To respond to support requests
• To improve the platform and content catalog

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Children's Privacy

Nivelera is designed for use by teachers, parents, and adult students. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us immediately at support@nivelera.com and we will delete it.

4. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on a managed cloud provider with encryption at rest and in transit. Payment processing is handled entirely by Stripe, which is PCI DSS Level 1 compliant. We use HTTPS for all data transmission and JWT tokens for authentication.

5. Cookies

We use only functional cookies and browser storage necessary for the platform to work (authentication tokens, cart contents, standards preferences). We do not use advertising or tracking cookies.

6. Your Rights

You may request at any time:

• Access to the personal data we hold about you
• Correction of inaccurate data
• Deletion of your account and associated personal data

To exercise these rights, email support@nivelera.com. We will respond within 30 days.

7. Third-Party Services

We use the following third-party services. Each has its own privacy policy governing the data they process on our behalf.

• Stripe — payment processing. Card data is handled exclusively by Stripe; we never store card numbers. Stripe Privacy Policy
• Amazon Web Services (S3) — encrypted file storage for purchased PDF workbooks
• Resend — transactional email delivery (order confirmations, password resets). Your email address is shared with Resend solely to deliver messages you request.
• Vercel — frontend hosting and aggregate traffic analytics. Vercel Analytics collects anonymous page-view counts and does not track individual users or set advertising cookies.
• Railway — backend hosting and database infrastructure

8. Changes to This Policy

We may update this Privacy Policy. We will notify you of material changes by email or a prominent notice on the platform. Continued use of the Service constitutes acceptance.

9. Contact

Privacy questions? Contact us at support@nivelera.com.