Privacy Policy

Controller and contact

Subera OÜ, established in Estonia, operates LiveKlass and is the controller responsible for the personal data described in this policy.

For privacy questions or requests, email hello@liveklass.io or use the official Contact page.

Personal data we collect

Depending on how you use LiveKlass, we may collect your name, email address, account identifier, preferred language, course enrollments, payment and transaction status, waitlist entries, support messages, lesson progress, completion status, and other information you submit.

We may also process limited technical information needed to operate and secure the service, such as IP address, browser and device information, request timestamps, error logs, authentication events, and security-related activity. We do not ask you to include sensitive personal data in course, waitlist, or support forms.

Where the data comes from

We receive personal data directly from you when you complete a form, create or use an account, purchase or access a course, contact support, or interact with lessons.

We may also receive account, payment, fraud-prevention, or transaction information from service providers such as the authentication provider and payment processor. We do not receive or store your full card number.

Purposes and legal bases

We process account, enrollment, course-access, payment-status, and progress data when it is necessary to provide the service or perform a contract with you.

We process records when required to comply with accounting, tax, consumer-protection, fraud-prevention, or other legal obligations.

We may process limited technical, support, and security data based on legitimate interests in operating, protecting, troubleshooting, and improving LiveKlass, provided those interests are not overridden by your rights.

Where consent is legally required, such as for certain optional marketing messages or non-essential cookies, we will request it separately. You may withdraw consent at any time without affecting earlier lawful processing.

Authentication and accounts

Account authentication may be provided through Shopemaa Accounts or another configured identity provider. The provider may process identifiers, login events, and account-security information under its own terms and privacy information.

Authentication tokens may be handled through secure mechanisms such as HTTP-only cookies. The frontend may store limited non-sensitive preferences, such as your selected language and portal preference, in browser storage.

Payments

Online payments may be processed by Stripe or another supported payment provider. The provider processes payment details, fraud signals, and transaction information needed to authorize and manage the payment.

LiveKlass does not store full card numbers or card security codes. We may store transaction identifiers, amounts, currency, payment status, refunds, and invoice-related information needed to manage enrollment and meet legal obligations.

Course access, video, Markdown, and progress

Lessons may contain video, written Markdown content, downloadable resources, or a combination of these formats. We process enrollment and authorization information to decide whether a lesson is public, available as a preview, or restricted to enrolled learners.

Private video delivery may use signed HLS URLs or similar time-limited access controls. Written lesson content may also be returned only after authorization. We may record lesson completion, last-accessed lesson, and progress so that you can continue learning and so that we can operate the course experience.

Service providers and recipients

We may share personal data with providers that support authentication, payments, hosting, cloud infrastructure, storage, content delivery, email delivery, monitoring, analytics when enabled, customer support, and professional services.

These providers receive only the information reasonably needed for their function and are expected to process it under applicable contracts and data-protection obligations. We may also disclose information when required by law, to protect legal rights, or in connection with a business reorganization or transfer.

International data transfers

Some service providers may process data outside Estonia or the European Economic Area. Where required, transfers will rely on a legally recognized safeguard, such as an adequacy decision, standard contractual clauses, or another lawful transfer mechanism.

The exact providers and transfer locations may change as the LiveKlass infrastructure evolves. Material changes will be reflected in this policy or related provider information.

Cookies and browser storage

LiveKlass may use strictly necessary cookies or browser storage for authentication, security, session continuity, language preferences, portal preferences, and other essential functionality.

Optional analytics, personalization, or marketing technologies will be used only when a valid legal basis exists and, where required, after obtaining consent. You can control cookies through your browser and any consent controls made available on the platform.

How long we keep data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected. Account, enrollment, and progress information may be retained while your account or course access remains active and for a reasonable period afterward to support records, disputes, and account restoration.

Payment, invoice, and transaction records may be kept for the period required by applicable accounting and tax law. Waitlist data is kept until you unsubscribe, withdraw consent, or the waitlist purpose ends. Support messages and technical logs are kept according to their operational, security, and legal relevance.

We may retain limited information for longer when necessary to establish, exercise, or defend legal claims, prevent fraud, comply with law, or document that a request has been fulfilled.

Your data-protection rights

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, portability of data you provided, or information about how your data is used.

You may object to processing based on legitimate interests or direct marketing. Where processing is based on consent, you may withdraw that consent. Some rights are not absolute, and we may need to verify your identity or retain information where the law permits or requires it.

You also have the right to lodge a complaint with a competent supervisory authority. In Estonia, this is the Data Protection Inspectorate (Andmekaitse Inspektsioon).

Children

LiveKlass is designed primarily for university students and adult professionals. If a learner is legally unable to consent or enter into the relevant agreement independently, a parent or legal guardian must provide any authorization required by applicable law.

Please contact us if you believe a child has provided personal data without the required authorization.

Security

We use reasonable technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure, loss, and destruction. Measures may include access controls, encrypted transport, secure authentication, private storage, monitoring, backups, and restricted administrative access.

No internet service can guarantee absolute security. You are responsible for protecting access to your email account and any credentials connected to your LiveKlass account.

Changes to this policy

We may update this policy when LiveKlass, its service providers, legal requirements, or data-processing practices change. The updated date will be shown at the top of the page.

If a change materially affects how personal data is used, we will provide additional notice when appropriate.