Privacy Policy

Last updated: February 2026

At NSKAI, your privacy is fundamental to our mission. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the ZERRA platform.

1. Information We Collect

1.1 Information You Provide

  • Account Data: Name, email address, and profile information provided during registration through our authentication provider (Clerk).
  • Course Content: Materials uploaded by Tutors including videos, documents, quizzes, and descriptions.
  • Communications: Messages sent through our contact form, support channels, or AI tutor conversations.
  • Payment Information: Billing details processed through our secure third-party payment processor. We do not store full credit card numbers on our servers.

1.2 Information Collected Automatically

  • Usage Data: Course enrollment, lesson progress, quiz results, XP earned, and certificates obtained.
  • Device Information: Browser type, operating system, and device identifiers used to optimize your experience.
  • Cookies & Analytics: We use essential cookies for authentication and optional analytics cookies to understand platform usage. See our Cookie Policy for details.

2. How We Use Your Information

We use collected data to:

  • Provide and maintain the ZERRA platform and its features.
  • Deliver personalized AI tutoring based on lesson context and your learning history.
  • Track your course progress, quizzes, and certifications.
  • Process payments and manage subscriptions.
  • Send important updates about your account, enrolled courses, and platform changes.
  • Improve the platform through anonymized analytics and usage patterns.
  • Prevent fraud, abuse, and unauthorized access.

3. AI Tutor Data Handling

When you interact with ZERRA's AI tutors, your questions and the related lesson context are sent to our AI provider to generate responses. We do not use your individual conversations to train external AI models. Conversations may be retained temporarily for your learning continuity and are handled in accordance with this policy.

4. Data Sharing

We do not sell your personal data. We share data only with:

  • Service Providers: Trusted third-party services that help us operate ZERRA, including authentication (Clerk), video delivery (Mux), file storage (UploadThing), payment processing, and email delivery (Resend). These providers are contractually obligated to protect your data.
  • Organization Admins: If you are part of an organization on ZERRA, your admin may see enrollment data, progress, and analytics relevant to their institution.
  • Legal Requirements: We may disclose data if required by law or to protect the rights and safety of NSKAI, our users, or the public.

5. Data Security

We implement industry-standard security measures to protect your data:

  • Data encrypted in transit (TLS 1.3) and at rest (AES-256).
  • Authentication managed by Clerk with support for multi-factor authentication and secure session management.
  • Server-side role-based access control ensuring users can only access data appropriate to their role.
  • Serverless PostgreSQL database (Neon) with automatic backups and environment-level isolation.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access and receive a copy of your personal data.
  • Correct inaccurate personal data.
  • Request deletion of your personal data.
  • Object to or restrict certain processing.
  • Data portability — receiving your data in a portable format.

To exercise any of these rights, contact us at contact@nskai.org.

8. Children's Privacy

ZERRA is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the platform. Continued use of ZERRA after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us at contact@nskai.org.