Privacy
What the Academy records about you, why, and who can see it.
What we record
Your email address, plus the name and role you fill in yourself. Your password is stored encrypted; we cannot read it back.
Beyond that we record which chapters you complete, when you were last active, and when you sign in. Administrative actions are logged separately: who invited, blocked or removed somebody.
We do not record an IP address, device or location alongside your activity.
Why
To give you access to the material your organisation bought, to keep your progress so you can pick up where you left off, and to show your administrator how the licence is being used.
We do not sell this data and we do not use it for advertising.
Who can see it
The administrator at your own organisation can see your name, your email address, the role you entered and how far you have got. That comes with a licence held in an organisation's name, and it is worth knowing before you start.
Learners at other organisations cannot see you, and you cannot see them. Studio Northstar can reach your data for administration and support.
Where it is kept
The database runs on Supabase in Frankfurt. The application runs on Vercel. Email is sent through our mail provider.
A current list of the parties processing data on our behalf is available on request at academy@studionorthstar.nl.
How long
We keep your account and progress for as long as your organisation's licence runs, and for a year after that.
Usage data we keep for two years: when you sign in, open a module or finish a chapter. After that we remove it automatically.
The administrative log is kept for two years. It records who granted or withdrew access, which is exactly what you need later to answer a question about access.
Your rights
You may see what we record about you, have it corrected and have it deleted. Your name and role you can change yourself on your account page, where you can also download everything we hold about you in one file.
For deletion, write to academy@studionorthstar.nl. We erase your profile, your progress and your certificates. What you sent us about a module stays without your name on it, because that remark is about the module.
If we cannot resolve it together, you can complain to the Dutch data protection authority.
Who is responsible
Studio Northstar B.V. processes your data in the Academy and is the controller for it. We are based in The Hague, the Netherlands, and registered with the Dutch Chamber of Commerce under number 42094999.
The Studio Northstar Academy is a product of Studio Northstar B.V.