Privacy Policy

1. Who We Are

TechNodeX ("we", "our", "us") is an online learning platform at learn.asv-labs.com. We provide cybersecurity, AI, and development education. Questions? Email us at [email protected].

2. What We Collect

Account data: Your email address when you sign in or create an account. If you use Google OAuth, we receive your name and email from Google.

Learning data:Which courses you've started, lessons completed, Check Work results, XP, streaks, skill-map progress, credentials, and portfolio-related records. This is used to show your dashboard, resume where you left off, and verify earned credentials.

Code-space activity: We process source code, run results, resource counters, and saved Check Work evidence needed to operate and protect the isolated sandbox.

Learner-authored content: Notes, code, and portfolio submissions you create inside the learning workspace are stored so the service can run, grade, save, and display your work back to you.

Tech Picks clicks: If you use a Tech Picks link, we record the selected product, course context, campaign/source values, referrer, user agent, hashed IP, hashed session token, and timestamp before redirecting you to Amazon. This helps us understand resource interest and verify that links are configured correctly.

3. How We Use It

To authenticate you and maintain your session
To track your learning progress and show it on your dashboard
To enforce sandbox throttles and isolation controls
To track Tech Picks outbound clicks and product-resource interest
To send transactional emails such as sign-in links and account notices
To improve the platform based on aggregate usage patterns

We do not sell your data. We do not use your data for advertising. We do not share your personal data with third parties except as necessary to operate the service (your email provider for sign-in links, hosting and security providers, and the storage services used by the product).

4. Cookies & Sessions

We use a session cookie to keep you logged in (set by NextAuth.js). This cookie is essential for the service to work. We do not use tracking cookies or third-party analytics cookies.

5. Data Retention

Your account data is retained while your account is active. You can download a machine-readable export from Account Settings. You can correct profile data, withdraw credentials, or submit a confirmed erasure request while signed in. You can also email [email protected] for manual help. We will process privacy requests within 30 days. Credential verification records may be withdrawn or marked revoked instead of silently deleted when that is needed to preserve third-party verification integrity.

6. Your Rights

You have the right to access, correct, delete, or request a copy of your personal data. A self-service data export is available from Account Settings, and authenticated privacy endpoints handle profile correction, credential withdrawal, and confirmed account erasure. Support remains available for manual privacy review at [email protected].

7. Security

We take security seriously — fitting for a cybersecurity education platform. Data is encrypted in transit (HTTPS/TLS). Passwords are never stored (we use magic links and OAuth). Our database is not publicly accessible. We use parameterized queries throughout to prevent SQL injection.

8. Changes

We may update this policy from time to time. Material changes will be communicated via email to registered users. The "last updated" date at the top reflects the most recent revision.

9. Contact

Privacy questions: [email protected]