privacy policy

this policy explains what information karnstack collects, how we use it, and the choices you have. it applies to karnstack.com and the karnstack platform.

• account information (your name and email), handled through our authentication provider.
• payment information, processed by our payment provider. we receive transaction status, not your full card number.
• learning data: course progress, quiz results, completion, and byox stage verifications.
• communications you send us, such as support emails.
• technical data collected automatically, such as ip address, device and browser information, and basic usage.

• to provide, operate, and improve the service.
• to manage your account and your plan.
• to issue certificates and byox credentials.
• to send transactional emails, and product updates if you have opted in.
• to prevent abuse and to comply with legal obligations.

we share data with processors who run parts of the service on our behalf: authentication, payments, email delivery, hosting and content delivery, video delivery, and github (for verifying byox credentials via signed tokens). they may only use the data to provide their service to us.

we use strictly necessary cookies for authentication and to remember your theme preference. we do not use advertising cookies. if we add analytics or other non-essential cookies later, we will update this policy and request consent where the law requires it.

we keep your information while your account is active and for as long as needed for legitimate operational and legal reasons. you can ask us to delete your account and associated data.

depending on where you live (for example, under the gdpr in the eea and uk, or the ccpa in california), you may have the right to access, correct, delete, or export your personal data, and to object to certain processing. email us to exercise these rights.

we use reasonable technical and organizational measures to protect your data. no method of transmission or storage is completely secure, so we cannot guarantee absolute security.

karnstack is not directed to children under 16, and we do not knowingly collect personal data from them.

your data may be processed in countries other than your own by us or our service providers, with appropriate safeguards where required.

we may update this policy. changes will be posted on this page with a new “last updated” date.

questions about your privacy? email mail@karnstack.com.