Privacy Policy

Introduction

Welcome to Code with Beto LLC ("we", "us", or "our"). This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit or use our website, courses, resources, and related services (collectively, the "Service"). We are committed to protecting your privacy and handling your information responsibly.

Information we collect

We collect information that you provide directly to us and information collected automatically when you use the Service.

• - Account Information: name, email address, authentication identifiers, and settings when you create an account or interact with the Service. Authentication is currently handled via Google Sign‑In (OAuth). Legacy email/password login is deprecated and being phased out.
• - Payment Information: purchase details and necessary billing information processed by Stripe. We do not store full payment card numbers; Stripe processes payments on our behalf.
• - Communications: your messages and contact preferences, including newsletter subscriptions and emails (email delivery and subscriptions may be managed via OneSignal).
• - Usage Data: IP address, device and browser type, pages visited, time spent, referring/exit pages, events you interact with, and other diagnostic data collected to operate and improve the Service. We use Umami Analytics to track on‑site interactions and usage across the Service.
• - Cookies and Similar Technologies: identifiers that help us remember your preferences, maintain sessions, measure performance, and improve the Service.

Cookies and similar technologies

We use cookies, local storage, and similar technologies to operate the Service, remember your settings, analyze usage, and improve performance. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service.

Use of Data

We use personal information for the following purposes:

• - Provide, maintain, and improve the Service, including account management and course access.
• - Process purchases and subscriptions, and manage post‑payment workflows (via Stripe).
• - Authenticate users and maintain secure sessions (via AWS Amplify/Auth).
• - Send service announcements, transactional emails, and, where permitted, optional updates and marketing communications (which may be facilitated by OneSignal).
• - Analyze usage and performance to improve content, features, and user experience.
• - Monitor and detect fraud, abuse, or security incidents, and enforce our terms.

Legal bases (EEA/UK)

If you are in the EEA or UK, we process personal information under the following legal bases:

• - Performance of a contract (e.g., providing access to purchased content).
• - Legitimate interests (e.g., improving the Service, preventing fraud) balanced against your rights.
• - Compliance with legal obligations.
• - Consent (e.g., certain marketing communications). You may withdraw consent at any time.

Sharing and disclosures

We do not sell personal information. We may share information with trusted service providers who act as processors and support the Service, subject to appropriate contractual safeguards.

• - Payment processing: Stripe.
• - Email and subscription management: OneSignal.
• - Authentication and infrastructure: AWS Amplify and related AWS services.
• - Analytics: Umami Analytics.
• - Hosting and performance: our hosting provider (e.g., Vercel) and related infrastructure providers.
• - Professional advisors, auditors, and legal authorities where required by law or to protect our rights.
• - Business transfers in connection with a merger, acquisition, or asset sale, subject to this Policy.

International data transfers

Your information may be transferred to and processed in countries outside your own (including the United States). Where required, we implement appropriate safeguards, such as Standard Contractual Clauses, to protect your information.

Your privacy rights

Depending on your location, you may have rights over your personal information.

• - EEA/UK: right of access, rectification, erasure, restriction, portability, and objection; and the right to withdraw consent.
• - California (CCPA/CPRA): right to know, delete, correct, and to opt out of certain data sharing. We do not "sell" personal information or "share" it for cross‑context behavioral advertising as defined by the CPRA.
• - To exercise rights, contact us at beto@codewithbeto.dev. We will verify requests as required by law.

Security of Data

We implement reasonable technical and organizational measures to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy (for example, while you maintain an account or as needed to provide the Service), comply with legal obligations, resolve disputes, and enforce our agreements.

Links to Other Sites

The Service may contain links to third‑party websites or services not operated by us. We are not responsible for their privacy practices. We encourage you to review the privacy policies of those services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date above. Material changes will be highlighted when appropriate.

Children's privacy

Our Service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can take appropriate action.

Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at beto@codewithbeto.dev.