Privacy Policy

1. Who we are

BLE Academy is operated by Bedford, Louis & Ellicott, LLC ("BLE", "we", "us"). Our platform is available at learning.ble.training. Questions about this policy: email privacy@ble.training.

2. Information we collect

• Account data: name, email address, and password (hashed — never stored in plain text).
• Learning activity: course progress, quiz scores, lesson completion timestamps, and video watch position (used to power resume-anywhere playback).
• Payment data: processed entirely by Stripe. We do not store card numbers. We receive a Stripe Customer ID and subscription status.
• Usage data: page views, feature interactions, and error logs — collected via standard server logs and analytics.
• Communications: messages you send to support or your team manager through the platform.

3. How we use your information

• To deliver the learning platform, track your progress, and issue certificates.
• To process payments and manage your subscription via Stripe.
• To send transactional emails (course reminders, due-date alerts, completion notices).
• To improve the platform and diagnose technical issues.
• To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your learning data for advertising.

4. Data sharing

We share data only with:

• Supabase — database and authentication infrastructure (data stored in US regions).
• Stripe — payment processing.
• Resend — transactional email delivery.
• Vercel — hosting and edge network.
• Your account manager — if your employer purchased seats, your completion data is visible to the account's manager admin.

5. Certificates and verification

Certificates are permanently stored and publicly verifiable via a unique code. Certificate records remain accessible even if you cancel your account, so verifying parties can always confirm a credential's authenticity.

6. Cookies

We use session cookies for authentication and preference cookies to remember settings. We do not use advertising or cross-site tracking cookies.

7. Your rights

You may contact us at any time to:

• Request a copy of the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data (excluding certificate records, which are retained to protect verifying parties).
• Object to certain processing.

Send requests to privacy@ble.training. We respond within 30 days.

8. Data security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256 via Supabase). Admin users are required to use multi-factor authentication. We conduct periodic security reviews.

9. Changes to this policy

We may update this policy. Material changes will be communicated by email to active account holders. The effective date at the top of this page always reflects the current version.