Privacy Policy

Last updated: June 2026

1. Data Controller

The data controller is Ibrahim Ben Hariz, trading as CYBEMY (SIRET 891 387 615 00059), 200 Rue de la Croix Nivert, 75015 Paris, France. For any data-related request, contact us at legal@cybemy.com.

2. Data We Collect

We collect only the data strictly necessary to operate the platform:

  • Account data: name, email address, and hashed password (when registering with email).
  • Learning progress: lessons completed, quiz attempts, drill progress, certificates earned.
  • Subscription data: subscription status and billing period. Payment details are processed exclusively by Stripe — CYBEMY does not store any card or banking data.
  • Discord identity: Discord user ID, collected only if you choose to connect your Discord account.
  • Contact messages: name, email, and message content submitted via the contact form.

3. Purposes of Processing

  • Creating and managing your account.
  • Providing access to courses, trainings, and learning pathways.
  • Processing your subscription and payments via Stripe.
  • Issuing certificates upon pathway completion.
  • Sending transactional emails (account verification, password reset, subscription confirmation) via Resend.
  • Granting access to the Discord community for Premium subscribers.
  • Responding to contact form enquiries.

4. Legal Basis

  • Contract performance — managing your account, subscription and access to content.
  • Legitimate interest — platform security and fraud prevention.
  • Legal obligation — retaining billing records as required by French law.

5. Third-Party Services

We use the following sub-processors, each bound by their own privacy policy:

  • Vercel (USA) — platform hosting.
  • Neon (EU) — database hosting.
  • Stripe (USA) — payment processing.
  • Resend (USA) — transactional email delivery.
  • Discord (USA) — community access for Premium subscribers (optional).

Transfers to the USA are carried out under appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

6. Retention Period

  • Account and learning data: retained for the duration of your account, then deleted within 3 years of account closure.
  • Billing records: 10 years (French commercial law obligation).
  • Contact messages: 3 years from last contact.

7. Cookies

We use only strictly necessary cookies required for the platform to function — specifically, a session cookie to keep you logged in. We do not use any tracking, advertising or analytics cookies. No consent is required for strictly necessary cookies under the ePrivacy Directive.

8. Your Rights

Under the GDPR, you have the right to access, rectify, erase, restrict or port your personal data, and to object to its processing. To exercise any of these rights, contact us at legal@cybemy.com. You may also lodge a complaint with the French data protection authority: cnil.fr.