How we protect your data
At IndoLingua, we take the protection of your personal data seriously. This policy explains how we collect, use, and protect your information.
We collect: account information (name, email, password), learning data (progress, scores, preferences), and technical data (IP address, browser, device).
Your data is used to: provide and improve our services, personalize your learning experience, send you relevant communications (with your consent), ensure platform security.
Your data is stored on secure servers managed by Supabase (EU). We retain your data for the duration of your account activity plus 3 years after closure. Transaction data (payment history) is retained by Paddle, our Merchant of Record, in accordance with PCI DSS standards and tax obligations (typically 7 years), independently of the deletion of your IndoLingua account.
We never sell your personal data. We only share it with: our technical providers — Paddle (payment processing, tax compliance, fraud prevention), Supabase (database hosting, backups — EU servers), Vercel (website hosting, content delivery) — and legal authorities if required by law.
We use essential cookies for the functioning of the site (authentication, language preferences) and analytical cookies to improve our services. You can manage your cookie preferences through your browser settings. Essential cookies cannot be disabled. Analytical cookies can be refused without impact on use of the service.
In accordance with GDPR, you have the right to: access, rectify, delete your data, data portability, and object to processing. To unsubscribe from marketing emails, click the "Unsubscribe" link in each email or update your preferences in your account. To exercise your other rights, contact us.
We implement advanced security measures: data encryption, two-factor authentication, regular security audits.
This policy may be updated. We will notify you of significant changes via email or notification on the platform.
In the event of a personal data breach likely to pose a risk to your rights and freedoms, we will notify you within 72 hours in accordance with Article 33 of the GDPR. The notification will include the nature of the breach, the data concerned, the measures taken and recommendations to protect your information.
For any questions regarding the protection of your data:
indolingua.fr@gmail.com