Privacy Policy
Last updated: 1 July 2026
This Privacy Policy explains how DeutschReady(“we”, “us”, the “Service”) processes your personal data when you create an account, pay for and take our German-language courses, or contact us. We handle personal data with care and within the limits of the EU General Data Protection Regulation (GDPR).
1. What personal data we collect
| Category | Examples | When |
|---|---|---|
| Account data | Email, full name, profile photo (avatar), sign-in method (email or Google), last sign-in time | When you register or sign in |
| Payment data | Billing email, amount, currency, plan, and payment/transaction IDs from Stripe or PayPal | When you subscribe or pay |
| Learning data | Classrooms assigned to you and your lesson progress | While you use the dashboard |
| Uploaded content | Files (PDF, DOCX, PPTX, images, text) used to generate classroom material | When files are uploaded for a lesson |
| Contact data | Your name, email, and message | When you submit the inquiry form |
| Technical data | IP address (for security and rate-limiting) and strictly-necessary session cookies | Automatically, as you use the Service |
We do notintentionally collect special-category (“sensitive”) data such as health, ethnicity, religion, or biometric data. Please do not include such information in uploaded files or messages.
2. Why we process your data and our lawful basis
- To provide the Service (contract): create and manage your account, deliver your courses, and track your progress.
- To take payment (contract / legal obligation): process your subscription and keep transaction records required by tax and accounting law.
- To respond to you (legitimate interest): answer inquiries and provide support.
- Security and fraud prevention (legitimate interest): rate-limiting and protecting accounts using IP addresses.
- Marketing updates (consent): only if you opt in, we may email you about new courses and events. You can withdraw consent at any time.
- Legal compliance (legal obligation): where we are required by law.
3. Who we share your data with
We do not sell your personal data. We share it only with service providers (“processors”) that help us run the Service, under contracts requiring them to protect it:
| Provider | Purpose |
|---|---|
| Supabase | Authentication and database hosting (account, learning, and payment records) |
| Stripe | Card payments and subscription billing |
| PayPal | PayPal payments |
| Resend | Sending transactional and inquiry emails |
| OpenMAIC (AI classroom generator) | Generating lesson content from uploaded files |
4. International transfers
Some of our providers may process data outside the European Economic Area (EEA). Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) to protect your data.
5. How long we keep your data
- Account & learning data: for as long as your account is active. If you delete your account, this data is removed promptly.
- Payment/transaction records: retained for the period required by tax and accounting law (typically up to 7–10 years), even after account deletion.
- Inquiry messages: kept only as long as needed to handle your request.
- Security logs (IP-based rate limits): retained for a short period, then expired automatically.
6. Cookies
We use strictly-necessary cookies to keep you signed in and secure. These are required for the Service to function and do not require consent. We do not use advertising cookies. If we introduce analytics or marketing cookies in future, we will ask for your consent first.
7. Your rights and how to exercise them
Under the GDPR you have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete data;
- erase your data (“right to be forgotten”);
- restrict or object to certain processing;
- data portability — receive your data in a machine-readable format;
- withdraw consent at any time (for marketing).
You can export your data and delete your account yourself from your Account & privacy page. For any other request, email info@deutschready.de. We will respond within 30 days (extendable by up to two further months for complex requests). We may ask you to verify your identity first.
Note: we may retain data where we have a legal obligation (e.g. payment records) or need it to establish, exercise, or defend a legal claim.
8. Complaints
Please contact us first at info@deutschready.de. You also have the right to lodge a complaint with your national data protection authority.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you. The date at the top shows when it was last revised.