Privacy policy

Anesty operates this website and the academy platform it sells. For the personal data described below, Anesty is the data controller. For the data your own students give you inside your academy, you are the controller and Anesty is your processor — we handle it on your instructions and for no other purpose.

Account data. Your name, email address, password hash, and the academy details you enter during setup.

Billing data. Plan, billing cycle, invoices, and the last four digits and brand of your card. Full card numbers are handled by our payment processor and never reach our servers.

Usage data. Pages requested, timestamps, IP address, browser and device type — the ordinary contents of a web server log, kept so we can debug failures and detect abuse.

Content you upload. Courses, lessons, media, and the student records inside your academy.

To provide the service you signed up for, to bill you for it, to keep it secure and available, and to answer you when you write to support. We process account and content data to perform our contract with you, usage data on the basis of our legitimate interest in a service that works and is not abused, and billing data because tax law requires us to keep the records.

We do not sell personal data, and we do not use your students' data to market anything to them.

Only the vendors it takes to run the product: our hosting provider, our payment processor, our transactional email provider, and our error-monitoring tool. Each is bound by a data-processing agreement and may use the data only to provide its service to us. We also disclose data where a law or a valid legal order requires it.

Account and content data for as long as your account is open, then for 30 days after you close it so an accidental deletion can be undone. Billing records for seven years, because tax law requires it. Server logs for 90 days.

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use of it, and ask for it in a portable format. Your academy's data can be exported from the dashboard at any time without asking us. For anything else, write to privacy@anesty.com and we will answer within 30 days.

Traffic is encrypted in transit with TLS. Passwords are stored as salted hashes, never in a recoverable form. Access to production data is limited to the engineers who need it and is logged. If a breach ever affects your data, we will tell you and the relevant supervisory authority without undue delay.

If we change this policy in a way that materially affects you, we will email you before the change takes effect. The date at the top of this page always reflects the current version.