Privacy Policy

Effective date: August 2026

Data Controller

NIN (Stealth Intelligence Nexus) is the data controller for personal data collected through this website.

Data We Collect

• Account data: email address, first name, last name (required for account creation).
• Subscription data: selected tier, payment status, billing period.
• Usage data: forum posts, quiz attempts, lesson access (within your account).
• Technical data: IP address, user agent (logged for security and rate-limiting purposes only).

Legal Basis for Processing

• Account creation and service delivery: contractual necessity (GDPR Art. 6(1)(b)).
• Security logging and fraud prevention: legitimate interest (GDPR Art. 6(1)(f)).
• Payment processing: handled by Stripe as a data processor; we do not store card details.

Data Retention

Account data is retained for the duration of your account plus 30 days after deletion request. Security logs are retained for 90 days. Forum posts are retained while your account is active.

Your Rights (GDPR)

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restrict processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)

To exercise any of these rights, contact: privacy@nin.example

Data Transfers

We do not transfer personal data outside the European Economic Area (EEA).

Third Parties

Stripe (payment processing) and our SMTP provider (transactional emails) are our only third-party data processors. Both operate under GDPR-compliant data processing agreements.