Privacy Policy
Last Updated: January 15, 2025
At brainy-api, we respect your privacy and take the protection of your personal information seriously. This policy explains what data we collect, why we need it, and how we keep it safe. We operate in accordance with Thailand's Personal Data Protection Act (PDPA) and international standards for data privacy.
Information We Collect
When you interact with our educational platform, we collect different types of information to provide you with a better learning experience. Some of this data you give us directly, while other information is gathered automatically as you use our services.
Information You Provide
- Registration details: Name, email address, phone number, and password when you create an account
- Profile information: Educational background, financial planning experience level, learning preferences
- Payment data: Billing information and transaction records when you enroll in paid programs
- Communications: Messages you send us through contact forms, support tickets, or email
- Course submissions: Assignments, project work, and other materials you submit during your studies
Automatically Collected Data
Our system collects technical information to ensure the platform runs smoothly and to understand how learners engage with our content.
| Data Type | Purpose | Retention Period |
|---|---|---|
| Device information | Platform compatibility and optimization | 90 days |
| IP address and location | Security, fraud prevention | 12 months |
| Learning progress | Track course completion, personalize content | Duration of enrollment + 3 years |
| Usage patterns | Improve user experience, identify issues | 24 months |
How We Use Your Information
We don't sell your data or use it for anything unrelated to your education. Every piece of information serves a specific purpose in making your learning experience better or running our educational services properly.
Primary purposes: Delivering educational content, tracking your progress, providing instructor feedback, processing enrollments, sending important updates about your courses, and improving our teaching methods based on how learners interact with materials.
We also analyze aggregated data (stripped of personal identifiers) to understand which teaching approaches work best and where students struggle. This helps us refine our budget contingency planning curriculum to be more effective.
Data Sharing and Third Parties
We're careful about who gets access to your information. Most of the time, your data stays within our systems. But sometimes we need to share limited information with specific service providers who help us run the platform.
Service Providers We Work With
- Payment processors: Handle transactions securely (they never get full card details from us)
- Email service: Delivers course updates and communications
- Cloud storage: Hosts course materials and user submissions
- Analytics tools: Help us understand platform performance (data is anonymized)
These partners are contractually obligated to protect your data and can only use it for the specific services they provide to us. They can't repurpose your information for their own business.
We will never share your personal information with marketing companies, data brokers, or anyone looking to send you promotional materials unrelated to brainy-api courses.
Your Privacy Rights
Under Thailand's PDPA, you have significant control over your personal data. These aren't just theoretical rights – we've built systems to make them practical and easy to exercise.
Access Your Data
Request a complete copy of all personal information we hold about you. We'll provide it in a readable format within 30 days.
Correct Inaccuracies
Update any incorrect or outdated information through your account settings, or contact us for assistance.
Delete Your Account
Request complete deletion of your account and associated data. Some records may be retained for legal compliance purposes.
Data Portability
Download your learning progress, submissions, and profile data in a machine-readable format to transfer elsewhere.
Restrict Processing
Limit how we use certain information while maintaining your account access and course progress.
Withdraw Consent
Opt out of optional data processing activities like analytics or personalized recommendations anytime.
To exercise any of these rights, email us at info@brainy-api.com with your request. We'll verify your identity and respond within the timeframes required by law.
Data Security Measures
Protecting your information isn't just about compliance – it's about maintaining the trust you place in us when you share personal details. We've implemented multiple layers of security to keep your data safe from unauthorized access, accidental loss, or malicious attacks.
Technical Safeguards
- All data transmissions use TLS encryption (that's the padlock you see in your browser)
- Passwords are hashed using industry-standard algorithms – we never store them in plain text
- Database access is restricted to essential personnel only, with activity logging
- Regular security audits and vulnerability assessments of our infrastructure
- Automatic backups stored in geographically separate locations
- Intrusion detection systems monitor for suspicious activity 24/7
Human Safeguards
Technology is only part of the equation. Our team receives regular training on data protection, and everyone who handles personal information signs confidentiality agreements. Access to sensitive data follows the principle of least privilege – people only see what they absolutely need for their job.
Data Retention and Deletion
We don't keep your information forever. Different types of data have different retention periods based on legal requirements, educational needs, and practical considerations.
Active enrollment: During your time as an active learner, we maintain complete records to support your education and provide instructor feedback. This includes all course work, progress tracking, and communications.
After you complete or leave a program, we keep your academic records (course completion, grades, certificates) for three years. This lets you request transcripts and gives us the ability to verify your credentials if needed.
Financial records related to payments are retained for seven years to comply with Thailand's accounting regulations. Technical logs and anonymized usage data are typically deleted after 24 months.
When data reaches the end of its retention period, it's permanently deleted from our systems through secure erasure methods. You can also request early deletion of certain information by contacting us directly.
International Data Transfers
Our primary servers are located within Thailand, but some of our service providers operate infrastructure in other countries. When your data crosses borders, we ensure it receives the same level of protection as required by Thai law.
We only work with providers in countries that offer adequate data protection standards or have specific contractual clauses that guarantee your information stays secure. Before any international transfer happens, we assess the risks and implement appropriate safeguards.
Children's Privacy
Our platform is designed for adult learners. We don't knowingly collect information from anyone under 18 years old. If you're under 18 and interested in our programs, please have a parent or guardian contact us to discuss appropriate enrollment options.
If we discover that we've accidentally collected data from someone underage, we'll delete it immediately and notify relevant parties as required by law.
Changes to This Policy
Privacy regulations evolve, and so do our practices. When we make changes to this policy, we'll update the date at the top and notify active users via email if the changes significantly affect how we handle data.
We recommend checking this page periodically if you want to stay informed about how we protect your information. Material changes will take effect 30 days after notification, giving you time to review and make decisions about your account.
Cookies and Tracking
Like most websites, we use cookies – small text files stored on your device that help our platform remember your preferences and login status. We're transparent about what cookies do and give you control over non-essential ones.
- Essential cookies: Keep you logged in, remember your language preference, maintain session security
- Analytics cookies: Help us understand which features get used most and where students encounter difficulties
- Preference cookies: Remember your display settings, timezone, and interface customizations
You can disable cookies through your browser settings, but this might affect platform functionality. Essential cookies are required for the site to work properly.
Questions About Your Privacy?
We're here to help. If you have concerns about how we handle data or want to exercise your privacy rights, reach out to us directly.
Email: info@brainy-api.com
Phone: +66 32 318 066
Address: Nai Mueang, Mueang Phitsanulok District, Phitsanulok 65000, Thailand
We typically respond to privacy inquiries within 48 hours during business days.