1. Who We Are

Meteora Mastery is a learning management platform that provides AI-powered educational courses, quizzes, and professional skills tracking.

Data Controller Contact: support@meteoramastery.com

Data Hosting: Your data is hosted in Microsoft Azure UK South region data centres.

2. What Data We Collect

We collect the following types of personal data:

• Account information: Name, email address, and hashed password
• Learning activity: Course enrolments, lecture progress (time spent, completion status), quiz attempts and scores, chat messages with the AI tutor
• Skills data: Skills proficiency scores and assessment history
• Technical data: IP address, browser type, and usage patterns (via analytics)

3. Why We Collect It

We use your data for the following purposes:

• To provide the learning service and track your progress
• To generate personalised quizzes based on lecture content
• To provide AI-powered chat responses to your questions
• To calculate and display your skills proficiency
• To improve the platform through aggregated, anonymised analytics

Legal basis: Contract performance (providing the service you signed up for) and legitimate interest (improving the platform).

4. How We Store It

• Data is stored in Microsoft Azure UK South data centre
• Passwords are securely hashed using bcrypt (we never store plain-text passwords)
• API access is secured with JWT (JSON Web Token) authentication
• All database connections are encrypted with SSL/TLS
• Access to production systems is restricted to authorised personnel only

5. Who We Share It With

• Azure OpenAI (Microsoft): For AI course generation, quiz generation, and AI chat responses. Only lecture content and your chat messages are sent to this service, not your personal account data. Hosted in Microsoft Azure data centres.
• Tensorix API: For text-to-speech audio narration of lectures only. Only lecture text content is sent to this service, not your personal data.
• Analytics providers: Anonymised usage data may be shared with analytics services to help us understand how the platform is used.

We do not sell your personal data to third parties.

6. Your Rights

Under GDPR, you have the following rights:

• Right to access: Export all your data via the data export feature in account settings
• Right to rectification: Update your profile information at any time
• Right to erasure: Delete your account and all associated data permanently
• Right to data portability: Export your data as a JSON file
• Right to object: Contact us to object to specific processing activities
• Right to lodge a complaint:You may contact the Information Commissioner's Office (ICO) in the UK if you have concerns about how we handle your data

7. Data Retention

• Account data is retained while your account is active
• When you delete your account, all personal data is permanently removed within 30 days
• Anonymised, aggregated analytics data may be retained indefinitely for platform improvement

8. Cookies

We use the following types of cookies:

• Essential cookies: Required for authentication (JWT session token). These cannot be disabled as they are necessary for the service to function.
• Analytics cookies (optional): Help us understand how the platform is used. These are only set with your consent.

You can manage your cookie preferences at any time through your browser settings.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users by email of any material changes. The "Last updated" date at the top of this page indicates when this policy was last revised.

10. Contact

For any questions about this privacy policy or how we handle your data, please contact us at: support@meteoramastery.com