Privacy Policy

1. Introduction

Welcome to n8n University. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online learning platform.

If you have any questions or concerns about this policy or our practices regarding your personal information, please contact us at privacy@n8nuniversity.com.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (encrypted)

2.2 Payment Information

Payment information is processed by third-party payment processors (Stripe and Green Invoice). We do not store your full credit card details on our servers. We only retain transaction records including purchase date, amount, and course purchased.

2.3 Usage Data

We automatically collect information about your use of our platform:

• Course progress and completion status
• Lessons viewed and time spent
• Quiz and exercise submissions
• Browser type and version
• IP address and device information
• Pages visited and navigation patterns

2.4 AI Tutor Interactions

When you use our AI-powered tutor (powered by Anthropic Claude), we may store your questions and the AI's responses to improve the learning experience and troubleshoot issues.

2.5 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze platform usage. You can control cookies through your browser settings.

3. How We Use Your Information

We use your personal information to:

• Provide access to purchased courses and learning materials
• Process payments and maintain transaction records
• Send transactional emails (purchase confirmations, password resets, important updates)
• Track your course progress and provide personalized learning experiences
• Power the AI tutor functionality to answer your questions
• Improve our platform, courses, and services
• Prevent fraud and ensure platform security
• Comply with legal obligations
• Send marketing communications (only with your consent, which you can withdraw at any time)

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and context:

• Contract Performance: Processing necessary to provide courses you purchased
• Consent: You have given explicit consent (e.g., marketing emails)
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., improving our platform, preventing fraud)
• Legal Obligation: Processing required to comply with legal obligations (e.g., tax records)

5. Data Sharing and Third Parties

We do NOT sell your personal information to third parties. We share your data only with trusted service providers necessary to operate our platform:

5.1 Service Providers

• Supabase: Authentication, database hosting, and data storage
• Stripe: Payment processing (international credit cards)
• Green Invoice: Payment processing and invoicing (Israel)
• Anthropic: AI-powered tutor functionality (Claude API)

5.2 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights, property, or safety.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure authentication via Supabase
• Payment processors are PCI DSS compliant
• Regular security updates and monitoring
• Access controls limiting who can view your data

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

• Active Accounts: We retain your data as long as your account is active or as needed to provide services
• Deleted Accounts: When you request account deletion, we retain your data for 30 days (to allow account recovery), then permanently delete it
• Payment Records: Transaction records are retained for 7 years to comply with tax and accounting regulations
• Legal Holds: Data may be retained longer if required by legal obligations or disputes

8. Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your data for certain purposes
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at privacy@n8nuniversity.com. We will respond to your request within 30 days.

9. Cookies and Tracking

9.1 Essential Cookies

We use essential cookies to maintain your login session and provide basic platform functionality. These cookies are necessary for the platform to work and cannot be disabled.

9.2 Analytics Cookies

We may use analytics cookies to understand how users interact with our platform and improve the user experience. You can opt out of analytics tracking through your browser settings.

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.

10. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country.

When we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or reliance on adequacy decisions.

11. Children's Privacy

Our service is not intended for individuals under the age of 16 (or under 13 in some jurisdictions). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email and/or by posting a prominent notice on our platform. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: