Privacy policy

This policy explains how DeepServal.net collects, uses, shares, stores, and protects personal information when you browse the site, create an account, enroll in a course, make a payment, or otherwise use the learning platform.

We process personal information in accordance with applicable data protection law, including South Africa's Protection of Personal Information Act, 2013 (POPIA), where it applies.

• Account information: your name, email address, authentication details, account role, and linked sign-in provider information.
• Learning information: course enrollments, lesson progress, last-viewed lessons, ratings, and reviews.
• Payment information: transaction references, payment status, amount, currency, and payment customer identifier. Paystack processes payment credentials; we do not receive or store your full card details.
• Content and files: material you submit, including administrative course or blog content and uploaded media.
• Technical and security information: request, device, browser, IP address, and security signals used to operate, troubleshoot, and protect the service.

• provide and maintain accounts, courses, and learning progress
• authenticate users and send verification or login codes
• process enrollments, payments, refunds, and related records
• display submitted ratings and reviews
• respond to support, privacy, and account requests
• detect abuse, enforce rate limits, and secure the platform
• comply with legal, accounting, and regulatory obligations

Automated security checks may temporarily block a request when it appears abusive or automated. Contact us if you believe a legitimate request was blocked incorrectly.

Depending on the context, we process information to perform our agreement with you, comply with law, pursue legitimate interests such as operating and securing the service, or act with your consent. Where processing relies on consent, you may withdraw it without affecting processing already performed lawfully.

We use cookies and browser storage needed for authentication, security, session continuity, and your theme preference. We do not currently use advertising cookies. Disabling essential storage may prevent account and course features from working correctly.

We do not sell personal information. We share information only when needed to provide the service, comply with law, protect rights and safety, or complete a business transfer. Service providers may include:

• Paystack for payment processing
• GitHub when you choose GitHub sign-in
• email delivery providers for verification and login messages
• hosting, database, object storage, and security providers

These providers process information under their own terms and privacy commitments. Paystack's current South African privacy terms are available at paystack.com/za/terms.

Some providers may process information outside South Africa. Where required, we take reasonable steps to use providers and safeguards that protect personal information in accordance with applicable law.

We retain personal information only for as long as needed for the purposes described in this policy, including providing active accounts, preserving learning and transaction records, resolving disputes, and meeting legal obligations. Retention periods vary by record type. Information is deleted, anonymized, or securely retained when the applicable period ends.

We use reasonable technical and organizational safeguards intended to protect information against loss, misuse, and unauthorized access or disclosure. No online system can guarantee absolute security.

Subject to applicable law, you may ask us to confirm whether we hold your personal information and request access, correction, deletion, restriction, or an objection to certain processing. You may also ask to withdraw consent or complain about how information is handled.

You may lodge a complaint with the Information Regulator of South Africa. The Regulator's official guidance confirms rights including access, correction, and objection under POPIA.

The service is intended for people who can lawfully create an account and enter into any related payment arrangement. If you believe a child supplied personal information without consent required by law, contact us so we can review and address it.

We may update this policy as the service or legal requirements change. The revised policy will be posted on this page with a new last-updated date. We will provide additional notice where required.

For questions or requests about this policy or your personal information, email onboarding@support.deepserval.net.