Privacy policy.

1. Who we are

Ezae Education Limited ("Ezae") is the data controller for personal data we collect through the Ezae Capital platform. Contact: privacy@ezae.org.

2. What we collect

We collect data you give us directly (email, display name, country during Stripe Connect onboarding, payment details processed by Stripe, optional Telegram identifier, optional broker linkage), data generated by your use of the platform (lessons completed, preferences, referral activity, affiliate commissions) and standard server logs (IP, user agent, timestamps).

3. How we use it

• Operate the platform and deliver the content you paid for.
• Process payments and pay out affiliate commissions through Stripe.
• Send transactional notifications (purchase confirmations, payout alerts) and educational updates you have opted into.
• Detect fraud, abuse and self-referral, and enforce the Terms of Service.
• Improve the platform via aggregated, non-identifying analytics.

4. Legal bases (UK / EU members)

We rely on contractual necessity for purchase, delivery and payouts; legitimate interests for fraud prevention and non-identifying analytics; and your consent for optional channels (Telegram DMs, marketing email).

5. Who we share it with

• Stripe - payments, Connect Express onboarding for affiliate payouts.
• Supabase - database and authentication hosting.
• Resend - transactional email delivery.
• Telegram - only if you link your Telegram account.
• Bunny Stream - video delivery for course content.
• PU Prime - only the linkage identifier, if you connect a broker account.

We do not sell your personal data.

6. International transfers

Some of our processors host data outside the UK / EEA. We rely on Standard Contractual Clauses or adequacy decisions for those transfers.

7. Retention

We keep account, purchase and commission records for as long as required for accounting, tax and anti-fraud purposes (typically seven years). You can request deletion at any time, subject to legal retention obligations.

8. Your rights

You have the right to access, correct, port or request deletion of your personal data; to object to processing based on legitimate interests; and to withdraw consent for optional channels at any time. Email privacy@ezae.org to exercise any of these rights. If you are in the UK or EEA and you believe we have not handled your data correctly, you can lodge a complaint with your local supervisory authority (in the UK, the ICO at ico.org.uk).

9. Cookies

We use a small set of strictly-necessary cookies for authentication and session continuity. We do not run third-party advertising cookies. We measure aggregate platform usage via privacy-respecting tooling that does not identify individuals.

10. Security

Data is encrypted in transit and at rest. Payment card data is handled by Stripe and never touches Ezae servers. Access to production systems is restricted to named personnel.

11. Changes

If we materially change how we use your data we will notify active members in-app or by email at least 14 days before the change takes effect.