1. Information We Collect

We collect the following information from users:

• Account information: first name, last name, email, bio, website, and username.
• Usage data: XP points, lessons completed, labs solved, average scores, posts made, certificates earned, plan type, and last visit timestamps.
• Subscription & payment info: Paddle/Gumroad subscription IDs, plan status, next billing date, and subscription activity.
• Account metadata: account status (active/inactive) and year joined.

2. How We Use Your Information

Your data is used to:

• Provide and manage your account and subscription.
• Track your learning progress and gamification points.
• Process payments and manage billing via Paddle/Gumroad.
• Improve our platform and deliver a better learning experience.

3. Cookies & Session Data

We use essential session cookies to maintain login sessions and ensure the platform functions correctly. These cookies are required for the service and cannot be disabled. We do not use tracking or marketing cookies.

4. Sharing Your Data

We do not sell your personal data. Your information may be shared only with:

• Paddle or Gumroad, to process payments and subscriptions.
• Our hosting providers, for platform operation and security.

5. Data Retention

We retain your data as long as your account is active or as required to comply with legal obligations. When you delete your account, your personal data will be removed from our platform.

6. Your Rights

Depending on your location, you may have rights to:

• Access and receive a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of your personal data.
• Withdraw consent where applicable.

You can contact us at deadoverflow@gmail.com to exercise these rights.

7. Updates to this Policy

We may update this privacy policy from time to time. Significant changes will be communicated via email or on our platform. Continued use of BugBounty.Academy after updates constitutes acceptance of the revised policy.