Privacy policy

Who we are

YESOD is a professional real-estate training system operated by [legal entity, company no.], [address]. Privacy questions: [privacy e-mail].

What we collect

Account details: name, e-mail address and whether it is verified, from the identity provider when you register and sign in. Your password stays with the identity provider; we never receive it.

Buyer details: first name, last name and phone — required before a purchase.

Profile photo (optional): cropped and resized on your device before upload, so location and camera details are not sent.

Learning data: lesson progress, practice and exam answers, submissions, notes, flashcards and study plan.

Questions to Anna, the AI tutor: the question and the answer are stored in your conversations and sent to the AI model provider only to produce the answer (see "Who we share with").

Orders: products, price, coupon and payment status. Payment card details, once payments open, are handled by the payment provider only.

Site usage: first-party measurement without advertising cookies or third parties — which pages and actions, no free text. If your browser asks not to be tracked (DNT/GPC), nothing is measured.

Technical data: IP address and request details for security and rate limiting, kept briefly.

Why we use it

To provide the courses and tools, open access after a purchase, keep your progress, answer your questions to Anna, secure the system, improve the content (in aggregate), and meet legal duties such as keeping accounting records.

We do not sell personal data or use it for advertising.

Cookies and browser storage

An encrypted sign-in cookie (necessary), a display preference cookie (light/dark), and your cart kept in your browser. No third-party advertising or tracking cookies.

Who we share with

Service providers acting on our behalf and instructions: Amazon Web Services (servers, database, files and the Claude AI model through Amazon Bedrock — EU, Frankfurt), Vercel (website hosting, Europe), Auth0 (sign-in, Europe), [e-mail provider], and [payment provider — once enabled].

We disclose data to authorities only when the law requires it.

How long we keep it

Account and learning data — while the account is active, until you delete it.

Anna conversations and contact-form messages — up to 24 months.

Usage measurement — up to 400 days.

Orders and accounting records — for the period the law requires [usually 7 years], also after an account is deleted, without identifying details beyond what is required.

Your rights

See your data and get a copy: Settings → "Your data" → download.

Correct your details: Settings → personal details.

Delete your account: Settings → "Your data" → delete account. Learning data, conversations and notes are deleted; orders are kept as the law requires, without identifying details.

Any question or request: [privacy e-mail]. You may also contact the Privacy Protection Authority.

Security

Encrypted connections, role-based permissions, keys and secrets in a dedicated vault, encrypted backups and a record of sensitive actions. No system is perfectly secure; if an incident affects you, we will notify you as the law requires.