GBCORP Education — Policies

Effective 2026-01-01 · Last reviewed 2026-04-23

1. ACCEPTANCE
By creating an account or using GBCORP Education ("Service"), you agree to these Terms. If you do not agree, do not use the Service.

2. ELIGIBILITY
You must be at least 16 years old (or the digital consent age in your country). Users below that age need verifiable parental or guardian consent. The Service is intended for personal, non-commercial learning.

3. ACCOUNT
You are responsible for keeping your credentials secure and for all activity on your account. Notify us immediately of any unauthorized use.

4. PAID PLANS & BILLING
Prices are displayed in local currency where supported. Subscriptions renew automatically until cancelled. Taxes (VAT/GST/sales tax) may be added per your location. See the Refund Policy for cancellation and refund rights.

5. LICENCE TO USE
We grant you a limited, non-exclusive, non-transferable, revocable licence to access lessons for personal learning only. You may not copy, resell, scrape, or redistribute content.

6. USER CONTENT
You retain ownership of content you submit (forum posts, assignments). You grant GBCORP a worldwide, royalty-free licence to host, display and use such content to provide the Service.

7. ACCEPTABLE USE
You agree not to: (a) infringe others' rights; (b) post unlawful, harassing, or hateful content; (c) attempt to circumvent security or rate limits; (d) use the Service to train competing AI models without written consent.

8. INTELLECTUAL PROPERTY
All course materials, logos, and software are owned by GBCORP or its licensors and protected by copyright and trademark laws.

9. TERMINATION
We may suspend or terminate accounts that violate these Terms. You may delete your account at any time via Profile → Account Settings, or via this web form.

10. DISCLAIMERS
The Service is provided "AS IS" without warranties of any kind, except warranties that cannot be excluded under applicable consumer-protection laws (EU, UK, India, Australia, etc.). Educational certificates are not accredited university credentials.

11. LIMITATION OF LIABILITY
To the maximum extent permitted by law, GBCORP is not liable for indirect, incidental, or consequential damages. For residents of the EU, UK, or any jurisdiction where such limits cannot apply, liability is limited to the amount paid by you in the preceding 12 months.

12. GOVERNING LAW & DISPUTES
These Terms are governed by the laws of the jurisdiction stated in the contracting entity notice, without prejudice to mandatory consumer-protection rights under the laws of your country of residence (including EU, UK, UAE, India, Singapore and others). Disputes are first addressed informally; unresolved disputes may be pursued in the competent courts of your country of residence where the law requires it.

13. CHANGES
We may update these Terms. Material changes will be notified via in-app message or email at least 30 days before they take effect for paid users.

14. CONTACT
info@gbcorp.education · GBCORP LLC, United States of America.

Effective 2026-01-01 · Last reviewed 2026-04-23

We respect your privacy. This Policy explains what we collect, how we use it, and your rights under applicable laws (EU GDPR, UK GDPR, UAE PDPL, Singapore PDPA, India DPDPA 2023, US state laws including CCPA/CPRA).

1. DATA WE COLLECT
• Account data: name, email, phone, date of birth, country.
• Learning data: courses viewed, progress, quiz scores, time spent.
• Payment data: handled by our processors (Stripe / Razorpay etc.) — we store only transaction IDs and last-4 digits, never full card numbers.
• Device & usage: IP address, device type, crash logs, feature usage.
• Uploaded content: profile photo, forum posts, assignment submissions.

2. HOW WE USE DATA
• Deliver and personalise the Service.
• Process payments and prevent fraud.
• Communicate (transactional emails, course updates).
• Marketing, only with your consent — you may opt out at any time.
• Comply with legal obligations.

3. LEGAL BASES (EU/UK GDPR)
We rely on: (a) Contract — delivering the Service you requested; (b) Legitimate interest — security, analytics, product improvement; (c) Consent — marketing, optional features; (d) Legal obligation — tax, fraud prevention.

4. DATA SHARING
We share data only with: (a) service providers under data-processing agreements (hosting, email, payments, analytics); (b) authorities when legally required; (c) acquirers in corporate transactions (with notice). We never sell personal data.

5. INTERNATIONAL TRANSFERS
When we transfer EU/UK data outside the EEA/UK, we use Standard Contractual Clauses and technical safeguards. UAE-origin data is handled per UAE PDPL cross-border transfer rules.

6. RETENTION
Account data is retained while your account is active and up to 30 days after deletion (legal-hold exceptions apply). Aggregate analytics may be retained longer.

7. YOUR RIGHTS
Depending on your jurisdiction, you have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Californians have CCPA/CPRA "Do Not Sell/Share" rights (we don't sell, but we honour requests). To exercise any right: support@gbcorp.education or Profile → Account Settings.

8. CHILDREN
For users under the age of digital consent, we require verifiable parental consent. We comply with COPPA (US, <13), UK Children's Code, and equivalent laws.

9. SECURITY
We use encryption in transit (TLS 1.2+) and at rest, strict access controls, audit logs, and regular security reviews. No system is 100% secure — report concerns to support@gbcorp.education.

10. COOKIES
See our Cookie Policy below.

11. DATA PROTECTION OFFICER
support@gbcorp.education (EU/UK representative contact available on request).

12. COMPLAINTS
You may complain to your local supervisory authority (e.g. ICO in the UK, CNIL in France, DIFC Commissioner of Data Protection in UAE).

13. UPDATES
Material changes will be notified in-app and by email at least 30 days in advance.

Effective 2026-01-01 · Last reviewed 2026-04-23

1. WHAT WE USE
GBCORP Education uses cookies and similar local-storage technologies on web. Mobile apps use equivalent device identifiers (IDFA/GAID) only with your consent.

2. CATEGORIES
• Strictly necessary — authentication, load balancing. Cannot be disabled.
• Performance — anonymised analytics (Google Analytics for Firebase). Opt-in in EEA/UK.
• Functional — remember language, theme, playback speed.
• Marketing — only if you opt in. We do not use third-party ad networks by default.

3. MANAGING COOKIES
Web: clear cookies via your browser settings. App: Profile → Notification Settings → Analytics opt-out. EU/UK users see a cookie banner on first visit.

4. THIRD-PARTY SERVICES
We use: Firebase (Google), Stripe/Razorpay, SendGrid. Each processor has its own cookie/data policy.

5. CHANGES
This Policy may change; material updates will be notified via the banner.

Effective 2026-01-01 · Last reviewed 2026-04-23

1. 14-DAY COOLING-OFF (EU / UK)
Residents of the EU, UK, and other jurisdictions with statutory cooling-off rights may cancel within 14 days of purchase for a full refund — provided you have not consumed more than 25% of a paid course. This right is waived where you have expressly consented to immediate content delivery and acknowledged the loss of cooling-off, as permitted by the EU Consumer Rights Directive.

2. OTHER REGIONS
We offer a discretionary 14-day refund worldwide subject to the same 25%-consumption limit.

3. SUBSCRIPTIONS
You may cancel auto-renewal at any time. Cancellation stops future charges; already-charged periods are non-refundable except as required by law.

4. LIFETIME PLANS
Refundable within 30 days of purchase if fewer than 10 lessons have been accessed.

5. HOW TO REQUEST A REFUND
Profile → Account Settings → Manage Subscription → Request Refund. Decisions are communicated within 7 working days.

6. CHARGEBACKS
Please contact us before initiating a chargeback — we resolve most disputes quickly and amicably.

7. TAX REFUNDS
VAT/GST/sales tax is refunded with the principal amount where applicable.

Effective 2026-01-01 · Last reviewed 2026-04-23

This notice applies to users below the age of digital consent in their country (e.g. <13 US, <16 most EU, <18 some Asian jurisdictions).

1. PARENTAL CONSENT
We require verifiable parental consent before collecting data from a minor. Consent is obtained via credit-card verification, signed consent form, or government-ID check.

2. WHAT WE COLLECT
Only what is necessary to deliver age-appropriate lessons and track learning progress. No behavioural advertising is performed on minors.

3. PARENTAL RIGHTS
A parent may: review their child's data, request correction or deletion, refuse further collection, and revoke consent at any time. Write to support@gbcorp.education.

4. COMPLIANCE
We comply with: COPPA (US), FERPA where applicable to school partnerships, UK Children's Code (age-appropriate design), GDPR Article 8, and similar laws elsewhere.

5. SCHOOL CONTRACTS
Where GBCORP is used under a school's licence, the school acts as controller and GBCORP as processor for student-generated data.

Effective 2026-01-01 · Last reviewed 2026-04-23

You agree NOT to use GBCORP Education to:

1. Post or transmit content that is illegal, hateful, harassing, or infringes others' rights.
2. Share account credentials or bypass subscription controls.
3. Scrape, mirror, or republish course content.
4. Use automated tools (bots, scrapers) without written permission.
5. Upload malware, attempt to probe for vulnerabilities, or circumvent security.
6. Impersonate others, including teachers or support staff.
7. Solicit other learners for unrelated commercial purposes.
8. Use the Service to train machine-learning models without express written permission.

Violations may result in content removal, account suspension, permanent termination, and, where applicable, legal action.

Report abuse: support@gbcorp.education

Effective 2026-01-01 · Last reviewed 2026-04-23

This DPA supplements our service agreement where GBCORP processes personal data on your behalf (e.g. schools, corporate clients).

1. SCOPE
GBCORP acts as Processor; the Client is Controller.

2. SUBJECT MATTER & DURATION
Processing is limited to what is necessary to deliver the Service, for the duration of the contract.

3. NATURE OF PROCESSING
Storage, retrieval, display, backup, deletion.

4. CATEGORIES OF DATA
Learner name, email, date of birth, course progress, assessment results.

5. SUB-PROCESSORS
Google (Firebase), Stripe/Razorpay, SendGrid. List updated at gbcorp.education/subprocessors.

6. INTERNATIONAL TRANSFERS
Standard Contractual Clauses (EU 2021/914), UK IDTA, and region-specific safeguards.

7. SECURITY
TLS 1.2+ in transit, AES-256 at rest, role-based access, annual penetration tests.

8. DATA SUBJECT RIGHTS
We assist Controller in responding to requests within statutory timeframes.

9. BREACH NOTIFICATION
GBCORP notifies Controller within 72 hours of becoming aware of a personal-data breach.

10. AUDITS
Controller may audit once per year with 30 days' notice; SOC 2/ISO 27001 reports available where held.

11. DELETION
On termination, we delete or return all Controller data within 30 days, subject to legal-hold exceptions.