Privacy
Privacy Notice
This notice explains what information Ace Study Aid uses, why it is needed, who receives it and the choices available to you.
1. Information we collect
We collect account, learning, commerce, technical, support, recommendation and consent information needed for the purposes below. This can include your name, email, authentication details, purchases, enrollments, progress, results, wishlist, device information, security events, support messages and privacy choices.
We store payment references and statuses but do not store complete payment-card details.
2. How we receive information
Information comes directly from you, from your use of Ace Study Aid and from providers involved in authentication, payment, messaging, security and course delivery.
3. Purposes and lawful bases
- Account creation, orders, course access and progress: performance of our contract with you.
- Receipts, financial records and legally required notices: contract or legal obligation.
- Security, fraud prevention, support and service reliability: legitimate interests or legal obligation.
- Optional analytics, marketing and certain personalisation: consent where required.
- Legal claims and regulatory cooperation: legitimate interests or legal obligation.
4. Children
You must be at least 18 to create an account independently. We do not currently offer a direct child-account workflow. A younger learner may use a parent- or guardian-managed account where lawful.
5. Who receives information
- Cloud hosting, storage and content-delivery providers.
- Paystack, Flutterwave, Stripe or another payment provider selected at checkout.
- Authentication, email, push-notification, security and support providers.
- Analytics providers enabled by your privacy choices.
- Instructors or learning partners where necessary to provide a course.
- Professional advisers, regulators or a corporate successor where lawfully required.
6. International transfers
Some providers may process information outside Nigeria. We use safeguards permitted by applicable law and maintain records of relevant transfer destinations and protections.
7. Retention
We retain information only as long as necessary for the relevant purpose. Account and learning records normally remain while an account is active; abandoned guest data is scheduled for removal after inactivity; support records may remain for three years after closure; security logs normally remain for twelve months; and financial records remain for the legally required accounting and dispute period.
Backups follow a rotating lifecycle. Account deletion removes or anonymises information that is not legally required.
8. Security
Safeguards include encryption in transit, password hashing, access controls, private storage, audit trails, payment verification, backups and incident procedures. No online system can guarantee absolute security.
9. Your rights
- Request access, correction, deletion, restriction or portability.
- Object to eligible processing and direct marketing.
- Withdraw consent as easily as it was given.
- Request review of significant automated decisions.
- Complain to the Nigeria Data Protection Commission.
10. Recommendations and automated processing
Course recommendations may use viewed courses, wishlist activity, purchases, enrollments, progress and saved interests. These recommendations do not produce legal or similarly significant effects. Optional personalised learning can be disabled without losing purchased access.
We will not use learner content for external AI-model training unless that use is clearly disclosed and supported by an appropriate lawful basis and contractual safeguards.
11. Marketing and communications
Marketing is optional. You can unsubscribe through a message or your saved preferences. Essential order, access, security and support communications remain enabled.
13. Changes and complaints
Material changes will be communicated and renewed consent requested where required. Contact privacy@example.com first so we can investigate. You may also complain to the Nigeria Data Protection Commission at ndpc.gov.ng.
14. Contact
Data controller: Ace Study Aid. Address: the registered address published by Ace Study Aid. Privacy contact: privacy@example.com.