Privacy policy

1. Who we are and what this policy covers

Stronux is operated by Devesoft LLC, a Florida limited liability company ("Stronux", "we" or "us"). This Privacy Policy applies to stronux.com, your Stronux account and the spaces hosted on Stronux, including spaces on a creator's own domain. For your Stronux account and for stronux.com, Stronux is responsible for your information (the "controller").

Each space is run by its creator. For the information you share in a space, such as your progress, purchases and posts, the creator of the space decides how it is used, and Stronux processes it on the creator's behalf to run the Service. Each space has its own privacy policy, linked at the bottom of the space, which explains how that creator uses your information. Questions about how a space uses your information go to its creator.

2. Information we collect

We collect only what we need to run Stronux:

• Account: your name, email address and password. Passwords are handled by Amazon Cognito, our sign-in provider; Stronux never sees or stores them in readable form. If you turn on two-step verification, it is managed by Amazon Cognito and your codes come from your authenticator app.
• Profile: the optional details you add, such as a username, photo, bio, location and interests. Your profile is private by default and is shown publicly only if you turn on your public profile.
• Activity in spaces: the spaces you join and your role in them, your enrollments and progress, quiz and exam results, the certificates you earn, the live sessions you sign up for, and what you post in communities (posts, comments and files).
• Purchases: what you buy, when, the price and the payment status. You enter your card details on Stripe's secure checkout and Stripe processes them; Stronux does not receive or store your full card number.
• If you run a space: your space's details and content, the status of your connected Stripe account, your plan and billing, your sales and payout records, and the details you add for invoices and certificates, such as your business name.
• Partner program: if you take part, your referral code, the referrals and sales credited to you, and your commissions and payouts.
• Communications: the messages you send us and your email settings.
• Technical information: when you use the Service, our servers record technical data such as your IP address, browser and device type, the requests made and the date and time. We use it to keep the Service secure, prevent abuse (for example, by limiting repeated sign-in attempts) and fix problems.
• Cookies and similar technologies: see our Cookie Policy.

3. How we use information

We use information to:

• create and run your account and let you sign in securely, including with two-step verification;
• provide spaces, courses, communities, live sessions and certificates, and show your progress;
• process purchases, plans, platform fees, payouts and partner commissions through Stripe;
• send the emails you need, such as sign-in codes, receipts, invitations, security alerts and updates from the spaces you joined, and optional emails such as community digests, which you can turn off;
• provide support, answer your questions and investigate problems;
• keep Stronux secure, prevent fraud and abuse, and enforce our Terms;
• fix and improve the Service;
• comply with the law and protect the rights and safety of people and of Stronux.

We do not sell your personal information, we do not share it for targeted advertising, and we do not use it to show you ads.

4. Legal bases (EEA, UK and similar laws)

If laws such as the GDPR apply to you, we rely on these legal bases:

• Contract: to provide your account, spaces, purchases and the features you ask for.
• Legitimate interests: to keep the Service secure, prevent fraud and abuse, improve the Service and credit referrals in our partner program, after weighing those interests against your rights.
• Consent: where we ask for it. You can withdraw it at any time.
• Legal obligation: to keep financial records and answer lawful requests.

5. Who can see your information

• Creators and their staff: when you join or buy in a space, its creator and the staff they add can see your member information in that space, such as your name, email, enrollments, progress, purchases and posts. Other members can see what you post in a community, with your name and photo.
• The public: only what you choose to make public, such as your public profile. Anyone with the link or ID of a certificate you earned can see your name, the course and the issue date, so the certificate can be verified.
• Stronux support: our support team can open time-limited, recorded access to a space to help its creator or to keep the Service safe.
• Service providers: companies that process information on our behalf, under contracts that limit how they use it (see the next section).
• Legal reasons and business transfers: when the law requires it, to protect rights and safety, or as part of a merger, acquisition or sale of assets, in which case we will tell you.

6. Service providers we use

Today these providers process information for us:

• Amazon Web Services: hosting, databases, file storage and content delivery; Amazon Cognito for sign-in and two-step verification; and Amazon SES for email delivery.
• Stripe: payments, creators' payouts, partner commissions and tax calculation.
• Mux: hosting and streaming of lesson videos.
• Daily: video rooms for live sessions (your name and, if you turn them on, your camera and microphone are streamed to the other participants).
• Upstash: security features, such as limiting repeated sign-in attempts.
• Google: if a creator connects Google, to create the Google Meet links and calendar events for their live sessions.
• Email delivery: our email hosting provider delivers some account and space emails.

When you use Stripe or Google directly, they also process your information under their own privacy policies.

7. International transfers

Stronux is based in the United States and stores information in the United States (Amazon Web Services, US East region). If you use Stronux from another country, your information is transferred to and processed in the United States, where data protection laws may differ from yours. When the law requires it, we use safeguards such as the European Commission's Standard Contractual Clauses with our providers.

8. How long we keep information

We keep your account information while your account is active. When you delete your account, you lose access right away: we remove your profile and sign-in details, end your memberships in spaces, and you can no longer sign in. Within 30 days we also delete, in every space you were in, your progress, test answers, certificates, posts and comments, and we email you when it's done.

Some information stays after you delete your account: receipts and payment records of your purchases, without your profile; records we must keep by law (such as financial and tax records, usually for up to 7 years); and copies in backups and logs, which are deleted on a regular schedule. We may also keep what we need to resolve disputes, prevent fraud and enforce our Terms.

9. Security

We protect information with measures such as encrypted connections (HTTPS), secure session cookies, optional two-step verification, access controls that limit who at Stronux can see data, and time-limited, recorded support access. No system is completely secure, so we cannot guarantee absolute security. If we learn of a security incident that affects your information, we will notify you as the law requires.

10. Your rights and choices

Depending on where you live, you may have the right to access, correct or delete your information, to receive a copy of it, to object to or restrict some uses, and to withdraw your consent. You can:

• see and correct your account and profile in Settings, and choose whether your profile is public;
• delete your account in Settings → Account or in Profile → Delete account in the Stronux app (cancel your active subscriptions first and, if you own an active space, close it or hand it over first);
• turn off optional emails, such as community digests, from the email itself or your settings;
• ask for a copy of your information, or make any other privacy request, by writing to contact@stronux.com;
• for information inside a space, contact the creator of that space; if you write to us, we will help you reach them.

We answer requests within 30 days. Where the law allows, we may extend that time (for example, by up to two more months under the GDPR when requests are complex or numerous), and if we do, we will tell you why. We may need to confirm your identity first. We will not treat you differently for exercising your rights. If you live in the EEA or the UK, you can also complain to your local data protection authority. If you live in the United States, see also section 11.

11. Notice for U.S. residents

If you live in California or another U.S. state with a consumer privacy law, this notice adds to the rest of this policy:

• Categories we collect: in the last 12 months we have collected the information described in section 2. Under those laws, it falls into these categories: identifiers (such as your name, email address, username, IP address and account ID); customer records and commercial information (such as your purchases, plans, invoices, payouts and commissions); internet or other network activity (the technical information in section 2 and your activity in spaces); education-related information (your enrollments, progress, quiz and exam results and certificates in spaces); the profile details you choose to add; and account sign-in credentials, which we use only to let you sign in.
• Sources: you; your devices, when you use the Service; the creators of the spaces you join (for example, when a creator invites you); and our service providers, such as Stripe for payment status and, if a creator connects it, Google.
• Purposes and recipients: we use this information for the purposes in section 3, keep it as explained in section 8, and disclose it for business purposes only to the recipients in sections 5 and 6.
• No sale or sharing: Stronux does not sell your personal information and does not share it for cross-context behavioral advertising, and has not done so in the last 12 months. We do not use sensitive personal information to infer characteristics about you.
• Your rights: depending on your state, you may have the right to know what personal information we collect, use and disclose and to get a copy of it; to delete it; to correct it; and to opt out of its sale or sharing (we do not sell or share it, so there is nothing to opt out of). If we decline your request, you can ask us to reconsider it by replying to our answer.
• No discrimination: we will not deny you the Service, charge you a different price or give you a different level of service because you exercised these rights.
• Authorized agents: you can ask someone to make a request for you. We may ask for proof that you authorized them and ask you to confirm your identity directly with us.
• How to make a request: write to contact@stronux.com from the email address on your account, or tell us how to reach you. We may need to confirm your identity first. We answer within 45 days and, if we need more time as those laws allow, we will tell you why and how much longer it will take.

For information that a space keeps for its creator, we act on the creator's behalf, and we may send your request to the creator of that space.

12. Children

Stronux is not directed to children under 13. Members must be at least 13 to create an account (or older where local law requires it, such as 16 in some countries of the European Economic Area), and members under 18 need a parent or legal guardian to make or approve any purchase. To create or run a space, receive payments or join the partner program, you must be at least 18, or the age of majority where you live if it is higher. If we learn that we collected information from a child under the allowed age without the required consent, we will delete it. If you think this has happened, write to us at contact@stronux.com.

13. Changes to this policy

We may update this policy. If a change is material, we will tell account holders by email or in the product before it takes effect. The "Last updated" date at the top shows when it last changed.

14. Contact

For questions about this policy or your information, contact Stronux (Devesoft LLC) at: