Privacy Policy

1. Introduction

Waajii Technology Limited ("we") operates Invest Math Course (Waajii Invest Lab, website: https://invest-lesson.waajii.com). We value your privacy. This policy explains how we collect, use, store, share, and protect your personal information, and the rights you have.

2. Information We Collect

To provide learning services, we may collect:

• Account information: email address, password hash, name (optional), and OAuth provider identifier (if you sign in with Google).
• Learning data: quiz records, homework submissions, stage progress, AI review results and scores, and consent records.
• Payment information: order status and Paddle transaction identifiers. Sensitive payment details such as full credit-card numbers are processed by Paddle and are not stored by us.
• Technical information: IP address, browser type, device information, and access logs (used for security, troubleshooting, and abuse prevention).

Please do not submit unnecessary sensitive information (such as full ID numbers or bank-account passwords) in homework or open-ended answers.

3. How We Use Information

• Provide, maintain, and improve course services and learning-progress records.
• Generate AI learning reports and homework scores.
• Process purchases, refunds, and account-related requests.
• Send course updates, study reminders, or marketing communications when you have consented.
• Use anonymized or aggregated data to improve course content when you have consented.
• Prevent fraud, abuse, and protect platform security.
• Comply with legal obligations or respond to lawful government requests.

Legal basis for processing (where GDPR applies): performance of a contract with you (providing services), your consent (marketing and optional data optimization), and our legitimate interests (security and service improvement), in each case subject to your rights.

4. Information Sharing and Third-Party Services

We do not sell your personal information. We only share necessary data with third parties in the following circumstances:

• Paddle: payment processing (subject to PCI-DSS and other industry standards).
• Google: OAuth authentication (only when you choose to use it).
• DeepSeek and other AI service providers: to generate homework and quiz scores, your answer and homework text may be sent to their APIs for processing. We require that it be used only to provide scoring services and not to recommend specific investment products to you.
• Infrastructure providers: database, hosting, and CDN providers (to the extent necessary to provide the service).
• Legal requirements: when required by judicial or government authorities in accordance with law.

5. Cross-Border Data Transfers

Our servers and third-party service providers may be located outside your country or region (including but not limited to the United States, Singapore, and Hong Kong, China). In such transfers, we will take reasonable measures (such as standard contractual clauses or equivalent safeguards) to protect your data, depending on applicable legal requirements.

6. Data Retention

• Account and learning records are retained while your account is active so that you can view your progress.
• Consent records are retained for the period required by law for compliance evidence.
• After you close your account, we will delete or anonymize your personal information within a reasonable period, except where required by law to retain it.
• Payment and order records may be retained longer for tax, accounting, or dispute-resolution purposes.

7. Data Security

We use industry-standard measures such as HTTPS transmission encryption, password hashing, and database access controls to protect your data. However, no network transmission or electronic storage can be guaranteed 100% secure. Please keep your account credentials safe.

8. Your Rights

Depending on applicable law, you may have the following rights (some require identity verification before we can act):

• Access, correct, or delete your personal information.
• Restrict or object to certain processing activities.
• Data portability (to the extent technically feasible).
• Withdraw consent (without affecting the lawfulness of processing based on consent before withdrawal).
• Lodge a complaint with a supervisory authority (such as a data-protection authority under the EU GDPR, or the equivalent in your jurisdiction).

To exercise these rights, please email us at support@waajii.com. We will respond within a reasonable period.

California residents (CCPA/CPRA): you have the right to know the categories of personal information we collect, to request deletion, and to opt out of sale/sharing (we do not sell personal information). The contact email above also applies.

9. Cookies and Tracking Technologies

We use necessary cookies and similar technologies to maintain login state, ensure security, and improve user experience. We do not currently use third-party advertising or tracking cookies. If analytics or marketing cookies are introduced in the future, we will update this policy and obtain consent where required.

10. Minors

This platform is intended for users aged 18 or older. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected such information, we will delete it as soon as possible.

11. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be posted prominently on the website and the "Last Updated" date will be revised. Continued use of the service constitutes acceptance of the revised policy.

12. Contact Us

Data controller: Waajii Technology Limited
Email: support@waajii.com