Privacy Policy: Secure, Localized B2B Data Compliance

1. EU Localized Hosting & GDPR Sovereignty

Consistent with the highest standards of data sovereignty and European privacy regulations (GDPR), all databases, customer information, files, and assets are hosted locally within the European Union (EU) on secure, geographically localized Cloudflare infrastructure. We do not transfer your personal data outside the European Economic Area (EEA).

2. Data We Collect & Observe

We collect and process only the minimum necessary information to deliver our advanced B2B training portal, secure handouts library, and cohort directories:

• General Performance Metrics: We utilize Google Analytics to monitor service volume, response rates, and aggregated diagnostic metrics to improve system uptime and usability.
• User Behavior Insights: We use Microsoft Clarity to capture anonymous session interactions and UI responsiveness. This helps us ensure the training interface is intuitive and optimized.
• Mandatory Audit Logs: For operational integrity and B2B validation, we record secure system activity logs, including verification OTP requests, portal logins, invoice downloads, and secure R2 file access metrics.

3. Direct Third-Party Disclosure Policy

We do not sell, rent, lease, or distribute your personal or corporate information to any third parties directly. Your email address, profile sharing variables, and training records are strictly utilized to operate and improve your cohort masterclass experience.

4. GDPR Rights & Fair Reciprocity

As an EU-focused service, we guarantee complete control over your GDPR privacy preferences. Through your Portal Profile Settings, you can configure:

• Cohort Roster Opt-In: Opting out completely conceals your profile from classmate directories. To maintain a fair peer environment, roster visibility operates on a principle of reciprocity—if you choose to remain hidden, you will also be unable to see other roster participants.
• Marketing & Updates Consent: You have complete, granular control to enable or disable updates and product offerings at any time.

5. Security and Data Retention

We implement industry-standard cryptographic practices (including salted database keys, token-based verification, and strict TLS HTTPS rules) to protect your sessions. Audit logs are preserved for a period of up to 12 months for compliance reporting and are subsequently deleted automatically.

6. Contact & Data Access Requests

To request a complete copy of your personal audit logs, ask for database erasure, or seek clarifications regarding our compliance frameworks, please contact our Data Protection Officer at:
privacy@golonex.ai