Privacy Policy

Effective Date: December 1, 2025

Last Updated: November 30, 2025

ParrotOS Academy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cybersecurity learning platform at parrotosacademy.com (the "Platform"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Platform.

1. Information We Collect

We collect information about you in various ways when you use our Platform. The types of information we may collect include:

Personal Information You Provide

When you create an account, we collect personal information that you voluntarily provide to us, including your name, email address, and authentication credentials through OAuth 2.0. When you make a donation or purchase a subscription through Stripe, we collect payment information processed securely by our third-party payment processor.

Learning Activity Data

To provide personalized learning experiences and track your progress, we automatically collect information about your use of the Platform. This includes the modules you access, quiz scores and attempts, completion status of courses, time spent on learning activities, and certificates earned. We also collect points earned, achievement badges, and leaderboard rankings to support our gamification features.

Technical Information

Our servers automatically collect certain technical information when you access the Platform. This includes your IP address, browser type and version, operating system, device information, and referring website addresses. We use session cookies for authentication and to maintain your logged-in state across pages.

User-Generated Content

When you participate in our community forum, we collect the posts, comments, and other content you create. This content may be visible to other users of the Platform.

2. How We Use Your Information

We use the information we collect for the following purposes:

Account Management and Authentication: We use your personal information to create and manage your user account, authenticate your identity when you log in, and communicate with you about your account.

Educational Services: Your learning activity data enables us to track your progress through courses and modules, generate personalized learning recommendations, award certificates upon course completion, and provide streak tracking and gamification features.

Platform Improvement: We analyze usage patterns and learning outcomes to improve our educational content, enhance Platform functionality, and develop new features and courses.

Payment Processing: When you make donations or purchase subscriptions, we use your payment information to process transactions securely through Stripe, our third-party payment processor. We do not store complete credit card information on our servers.

Communication: We may use your email address to send you important Platform updates, respond to your inquiries and support requests, and notify you of new features or courses (you may opt out of promotional emails).

Legal Compliance: We may use your information to comply with applicable laws and regulations, respond to legal requests and prevent fraud, and enforce our Terms of Service.

3. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

Service Providers: We share information with trusted third-party service providers who assist us in operating the Platform. This includes OAuth Provider for authentication services and Stripe for payment processing. These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Public Information: Certain information is publicly visible by design. Your forum posts and comments are visible to other Platform users. Leaderboard rankings display your username and points (you may opt out). Certificates you earn contain your name and completion information.

Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities, such as a court order or subpoena. We may also disclose information to protect our rights, property, or safety, or the rights, property, or safety of our users or others.

Business Transfers: If ParrotOS Academy is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Platform of any change in ownership or use of your personal information.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission using SSL/TLS, secure password hashing, regular security audits, and restricted access to personal information by employees and contractors.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you request account deletion, we will delete or anonymize your personal information within thirty days, except where we are required to retain it for legal, accounting, or security purposes. Learning progress data and certificates may be retained for verification purposes even after account deletion.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability: You have the right to request access to the personal information we hold about you and receive a copy of your data in a structured, commonly used format.

Correction: You may request correction of inaccurate or incomplete personal information through your account settings or by contacting us.

Deletion: You may request deletion of your personal information, subject to certain exceptions for legal compliance, fraud prevention, and security purposes.

Opt-Out: You may opt out of promotional emails by clicking the unsubscribe link in any email we send. You may opt out of leaderboard display in your account settings.

California Residents: If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, and disclose, and the right to request deletion of your personal information. We do not sell personal information. To exercise these rights, please contact us at [email protected].

European Residents: If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty days.

7. Children's Privacy

ParrotOS Academy is intended for users aged thirteen and older. We do not knowingly collect personal information from children under thirteen. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under thirteen without parental consent, we will take steps to delete that information.

8. Third-Party Links and Services

The Platform may contain links to third-party websites, including ParrotOS Official documentation and external resources. We are not responsible for the privacy practices of these third-party sites. We encourage you to read the privacy policies of any third-party sites you visit.

Our Platform uses the following third-party services:

OAuth Provider: Provides OAuth authentication services. View their privacy policy at your-oauth-provider.com/privacy.

Stripe: Processes payments for donations and subscriptions. View their privacy policy at stripe.com/privacy.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal information, to the United States and process it there. By using the Platform, you consent to this transfer.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Platform and hold certain information. Cookies are files with a small amount of data that are sent to your browser from a website and stored on your device.

Essential Cookies: These cookies are necessary for the Platform to function and cannot be disabled. They include session cookies for authentication.

Analytics Cookies: We use analytics services to understand how users interact with the Platform. You may disable these through your browser settings.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Platform.

11. Do Not Track Signals

Some web browsers include a "Do Not Track" feature that signals to websites you visit that you do not want to have your online activity tracked. The Platform does not currently respond to Do Not Track signals.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: [email protected]

Mail: ParrotOS Academy, Attn: Privacy Officer, [Address to be added]

Platform: Use the contact form at parrotosacademy.com/contact

For California residents exercising CCPA rights, please include "California Privacy Rights Request" in the subject line.


Acknowledgment: By using ParrotOS Academy, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.