Privacy Policy

Last Updated: July 23, 2026

Arepa Spanish ("we," "us," or "our"), operated by Alexandria's Design LLC, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform at arepaspanish.com.

1. Information We Collect

1.1 Information You Provide

  • Account Information: When you create an account, we collect your name and email address through our authentication provider, Clerk.
  • Payment Information: When you purchase a subscription, payment details (credit card number, billing address) are collected and processed directly by Stripe. We never store your full payment card details on our servers.
  • Communications: If you contact us via email, we may retain the content of your messages and your email address.

1.2 Information Collected Automatically

  • Lesson Progress:Your course progress (completed lessons, quiz scores, activity states) is stored locally in your browser's localStorage. This data stays on your device and is not transmitted to our servers.
  • Usage Data: We may collect basic analytics data such as pages visited, time spent, and referral sources through our hosting provider (Vercel).

2. Third-Party Services

We use the following third-party services, each with their own privacy policies. We encourage you to review them:

2.1 Clerk (Authentication)

Clerk handles user sign-up, sign-in, and session management. They process your name, email, and authentication credentials. Clerk Privacy Policy

2.2 Stripe (Payments)

Stripe processes all payment transactions. Your payment information is handled directly by Stripe and is subject to Stripe's security standards (PCI DSS Level 1). We only receive confirmation of payment status and a truncated card identifier. Stripe Privacy Policy

2.3 Vercel (Hosting)

Our Platform is hosted on Vercel, which may collect standard server logs including IP addresses and request metadata. Vercel Privacy Policy

2.4 OpenAI (AI Tutor Feature)

Our AI tutor feature sends your learning queries to OpenAI for processing. These interactions may include the text of your questions and the lesson context. OpenAI processes this data according to their API usage policies and does not use API inputs for model training. OpenAI Privacy Policy

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services.
  • Process payments and manage subscriptions.
  • Send transactional emails (e.g., payment receipts, subscription changes).
  • Respond to your inquiries and support requests.
  • Detect and prevent fraud or abuse.
  • Comply with legal obligations.

We do not sell your personal information to third parties. We do not send marketing emails unless you have explicitly opted in.

4. Local Storage (localStorage)

We use your browser's localStorage to save your lesson progress, theme preferences, and course completion data. This information:

  • Is stored entirely on your device.
  • Is not transmitted to our servers or any third party.
  • Can be cleared at any time through your browser settings.
  • Will be lost if you clear your browser data or switch devices.

5. Cookies

We use a minimal number of cookies for essential functionality:

  • Authentication Cookies: Set by Clerk to maintain your logged-in session. These are strictly necessary and cannot be disabled while using the Platform.
  • Hosting Cookies: Vercel may set technical cookies for load balancing and security purposes.

We do not use advertising cookies or third-party tracking cookies. We do not participate in cross-site behavioral advertising.

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide services. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain certain records (e.g., payment transaction records for tax and accounting purposes).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate or incomplete data.
  • Deletion: Request that we delete your personal data, subject to legal retention requirements.
  • Portability: Request a machine-readable copy of your data.
  • Objection: Object to processing of your data in certain circumstances.

To exercise any of these rights, please contact us at learnarepaspanish@gmail.com. We will respond within 45 days, as required by applicable law.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

8.1 Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information:

  • Identifiers: Name, email address, account username (collected via Clerk).
  • Commercial Information: Subscription plan purchased, payment status (collected via Stripe).
  • Internet or Network Activity: Pages visited, time spent, referral sources, IP address (collected via Vercel hosting logs).
  • Inferences: Lesson progress and quiz scores (stored locally in your browser).

We do not collect biometric information, geolocation data beyond IP, or sensitive personal information as defined under CPRA.

8.2 Your CCPA / CPRA Rights

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: Request deletion of your personal information, subject to legal retention exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt-Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. There is nothing to opt out of.
  • Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information.
  • Right to Non-Discrimination: We will not deny services, charge different prices, or provide a different level of quality because you exercised any of your CCPA / CPRA rights.

8.3 How to Exercise Your Rights

Submit a verifiable request by emailing learnarepaspanish@gmail.comwith the subject line "CCPA Request" and the email address associated with your account. We will respond within 45 calendar days, with one possible 45-day extension if reasonably necessary. You may designate an authorized agent to make a request on your behalf with proof of authorization.

9. European Economic Area, United Kingdom, and International Users (GDPR)

If you access our Platform from the European Economic Area (EEA), the United Kingdom, or any other jurisdiction with comprehensive data protection law, the following additional terms apply.

9.1 Legal Basis for Processing

We process your personal data on the following legal bases:

  • Performance of a contract: To create your account, deliver the courses you have purchased, and process payments.
  • Legitimate interests: To prevent fraud, secure the Platform, and improve our services, where such interests are not overridden by your fundamental rights.
  • Consent: Where required by law (e.g., optional analytics or marketing communications). You may withdraw consent at any time without affecting prior lawful processing.
  • Legal obligation: To comply with tax, accounting, and other legal requirements.

9.2 International Data Transfers

Alexandria's Design LLC is based in the United States. When you use the Platform, your personal data is transferred to and processed in the United States and other countries where our service providers (Clerk, Stripe, Vercel, OpenAI) operate. These countries may have different data protection laws than your jurisdiction. Where required, we rely on Standard Contractual Clauses approved by the European Commission and equivalent safeguards under the UK GDPR.

9.3 Your GDPR Rights

In addition to the rights listed in Section 7, EEA and UK residents have the right to:

  • Withdraw consent at any time, where processing is based on consent.
  • Lodge a complaint with your local data protection authority (e.g., the Information Commissioner's Office in the UK, or the AEPD in Spain). However, we encourage you to contact us first so we can address your concern.
  • Request restriction of processing in certain circumstances.

9.4 Data Protection Contact

For privacy inquiries from EEA, UK, or other international users, please contact learnarepaspanish@gmail.com.

10. Children's Privacy

Our Platform is intended for users aged 13 and older. Users between 13 and 17 must have a parent or legal guardian review these policies and consent to the processing of their data on their behalf. Parents are responsible for any payment and account activity associated with a minor's account.

We do not knowingly collect personal information from children under 13. If you become aware that a child under 13 has provided us with personal data, please contact us and we will promptly delete it.

11. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, we will notify registered users by email. We encourage you to review this Privacy Policy regularly.

13. Contact Us

For privacy-related inquiries or to exercise your data rights, please contact: