Privacy Policy

1. Data We Collect

TelcoSec Research ("we", "our", or "us") collects the data necessary to run your account and the platform:

• Account data (via Auth0): email address, display name, avatar, and login provider.
• Profile data you provide (optional): job title, employer, school/institute, city, and country.
• Platform activity: completed lessons/labs, XP, streaks, certifications earned, and support requests.
• Payment data: we never receive or store your card number. Payments are processed entirely by Stripe; we retain only the resulting subscription/purchase status and a Stripe customer/subscription reference ID.
• Technical data: IP address and browser user-agent, retained briefly for security/abuse prevention (rate limiting) and error diagnostics.

2. How We Use It

Your information is used to operate your account, deliver the academy/lab content and certifications you've unlocked, process payments, respond to support requests, and send transactional emails (welcome, receipts, billing notices). With your consent (see our Cookie Policy ), we also use analytics and advertising tools to measure and improve the platform and our marketing campaigns. We do not sell your personal data.

3. Third-Party Processors

We share the minimum data each of these providers needs to do its job. None of them are permitted to use your data for their own purposes beyond providing the service to us.

• Auth0 - authentication and session management.
• Stripe - payment processing, subscription billing, and the self-service billing portal.
• SendGrid - transactional email delivery (welcome emails, purchase receipts, billing alerts).
• Cloudflare - hosting, CDN, and database infrastructure (D1) underlying the entire platform.
• Google Analytics & Microsoft Clarity - usage analytics and session diagnostics (consent-gated).
• HubSpot - customer relationship management and support/marketing communications (consent-gated).
• Meta Pixel & LinkedIn Insight Tag - advertising conversion measurement (consent-gated).

4. Cookies and Tracking

We use essential cookies for session management and authentication (via Auth0) that cannot be disabled without breaking login. Optional analytics and advertising cookies are only set if you accept them via the cookie consent banner. See our Cookie Policy for the full list and how to change your choice.

5. Data Retention

We retain your account and activity data for as long as your account is active. If you delete your account, your profile and activity data are permanently removed from our database immediately, and your Auth0 identity is deleted. Any active subscription is canceled at the same time. Some records (e.g. billing history required for tax/accounting purposes) may be retained by our payment processor, Stripe, per their own retention obligations, independent of your TelcoSec account.

6. Your Rights

Wherever you're located, you have the right to access, correct, export, or delete your personal data. If you're in the EU/EEA or UK, these are your rights under GDPR specifically (access, rectification, erasure, portability, and objection to processing).

• Access & export: your profile and progress data are visible in your Profile . For a full data export, contact us.
• Deletion: you can permanently delete your account and all associated data at any time from your Profile settings. This also cancels any active subscription.
• Correction: update your profile details directly, or contact us for anything you can't change yourself.

To exercise any of these rights, or if you have a privacy question or complaint, contact us via the Contact page.

7. Security

We implement industry-standard security controls to protect your data, including encryption in transit (TLS) and at rest, and never store raw payment card data ourselves - that's handled entirely by Stripe.