Privacy Policy

CareerCube is operated by Likemymind Media B.V., a company registered in the Netherlands. Our website address is https://careercube.io. For questions about this privacy policy, contact us at privacy@careercube.io.

We collect the following personal data: • Account information: name, email address, and profile picture (provided via Auth0 authentication) • Payment information: processed securely by Stripe. We do not store credit card details • Usage data: course progress, quiz results, forum posts, and Cube Kudos activity • Technical data: IP address, browser type, and device information for security and analytics purposes • Cookies: authentication tokens, language preferences, and currency settings

We process your personal data for the following purposes: • To provide and maintain your account and course access • To process payments and manage subscriptions • To track your learning progress and issue certificates • To operate the Cube Kudos rewards system and course forums • To send transactional emails (account confirmation, trial reminders, payment receipts) • To improve our platform through anonymized analytics (Google Analytics) • To comply with legal obligations

Your data is stored and processed using the following service providers, all of which are located in the United States: • MongoDB Atlas (database hosting) — MongoDB, Inc. • Auth0/Okta (authentication) — Okta, Inc. • Stripe (payment processing) — Stripe, Inc. • Bunny.net (video delivery) — BunnyWay d.o.o. (EU-based, Slovenia) • Brevo/Sendinblue (transactional email) — Brevo SAS (EU-based, France) For US-based providers, the transfer of personal data from the EU/EEA is protected under the EU-US Data Privacy Framework (DPF), adopted by the European Commission in July 2023. MongoDB, Okta, and Stripe are certified participants of the Data Privacy Framework, which ensures an adequate level of data protection as required by GDPR Article 45. We have Data Processing Agreements (DPAs) in place with all service providers that process personal data on our behalf, as required by GDPR Article 28.

We use the following cookies: • Essential cookies: authentication session tokens (required for login functionality) • Preference cookies: language and currency settings (stored in localStorage) • Analytics cookies: Google Analytics (anonymized, for understanding site usage) You can control cookie settings through your browser. Disabling essential cookies will prevent you from logging in.

We do not sell your personal data. We share data only with: • Payment processor (Stripe) for transaction processing • Authentication provider (Auth0) for secure login • Email service (Brevo) for transactional communications • Analytics (Google Analytics) in anonymized form We may disclose data if required by law or judicial order.

• Account data: retained for as long as your account is active, plus 30 days after deletion request • Payment records: retained for 7 years as required by Dutch tax law • Course progress and certificates: retained for as long as your account is active • Forum posts: retained indefinitely (you may request deletion) • Analytics data: anonymized and retained for 26 months

Under the General Data Protection Regulation (GDPR), if you are in the EU/EEA, you have the following rights: • Right of access: request a copy of your personal data • Right to rectification: correct inaccurate data • Right to erasure: request deletion of your data ("right to be forgotten") • Right to restriction: limit how we process your data • Right to data portability: receive your data in a machine-readable format • Right to object: object to processing based on legitimate interests • Right to withdraw consent: withdraw consent at any time To exercise these rights, contact us at privacy@careercube.io. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at https://autoriteitpersoonsgegevens.nl.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA): • Right to know what personal information is collected • Right to delete personal information • Right to opt-out of the sale of personal information (we do not sell your data) • Right to non-discrimination for exercising your privacy rights

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.

We may update this privacy policy from time to time. We will notify registered users of significant changes via email. The latest version is always available on this page.

Likemymind Media B.V. The Netherlands Email: privacy@careercube.io Website: https://careercube.io