Privacy Policy

1. Introduction

We are Borderless Coding. This Privacy Policy explains how we collect, use, share, and protect your information when you use our websites, programs, mentorships, and platform (collectively, the Services).

2. Data we collect

• Account & Contact: name, email, password hash, phone (optional), location (city/country).
• Billing: payer name, address, tax IDs (if provided), partial payment details handled by processors (Stripe/Appmax)—we do not store full card numbers.
• Usage & Device: pages viewed, clicks, IP, approximate location, device, browser—via cookies or similar tech.
• Content & Submissions: messages sent via forms, forum posts, assignments, uploaded files.
• Mentorship/Programs: scheduling info, progress, feedback, recordings/notes (if consented).
• Marketing preferences: email opt-ins, attribution (UTM), referrals.

3. How we use data (purposes & legal bases)

• Provide the Services (contract) – account creation, authentication, course/mentorship access, payments, receipts.
• Operate & Improve (legitimate interests) – analytics, debugging, preventing abuse, training quality.
• Communications (consent/legitimate interests) – onboarding emails, product updates; marketing emails only with opt‑in and easy opt‑out.
• Compliance (legal obligation) – tax/audit records, fraud prevention, court orders.
• Personalization (consent/legitimate interests) – recommended content, reminders.

4. Sharing

We share data with service providers/processors strictly to run the Services: Stripe, Appmax, Resend (email), Vimeo (video), Notion (internal docs), Analytics/Ads (Google/Meta), and other vetted vendors listed here: /legal/vendors. We may share as required by law, during a merger/acquisition, or to prevent fraud/abuse.

5. Cookies & tracking

We use essential cookies (login, session) and optional analytics/ads cookies. You can manage preferences via our cookie banner (Granular: Essential / Analytics / Marketing). See /legal/cookies for details.

6. International transfers

We operate internationally. Where laws (e.g., GDPR/LGPD) require, we use approved safeguards (e.g., SCCs, contractual clauses) for cross‑border transfers.

7. Data retention

• Account data: for the life of the account + up to 7 years for finance/audit.
• Program records: 24 months after completion unless you request deletion earlier (subject to legal obligations).
• Marketing data: until you withdraw consent.

8. Your rights

Depending on where you live (e.g., EEA/UK – GDPR, Brazil – LGPD, California – CPRA), you may have rights to access, correct, delete, port data, object/restrict processing, and withdraw consent.

To exercise rights: email contato@borderlesscoding.com. We will verify your identity and respond within the legally required time.

9. Children

Our Services are for individuals 16+ (or local age of digital consent). We don’t knowingly collect data from children.

10. Security

We use industry standard controls: encryption in transit, access controls, least‑privilege, audit logs, vendor reviews, and regular backups. No method is 100% secure.

11. Changes to this policy

12. Contact