Privacy Policy | ASEAN Academy

1. Who we are

ASEAN Academy (“we”, “us”) runs this website and the online courses sold on it. We are based in Singapore and follow Singapore's Personal Data Protection Act 2012 (PDPA).

ASEAN Academy · Business registration in progress · Singapore

Our Data Protection Officer can be reached at aseanacademyedu@gmail.com. Write to them with any question, request or complaint about your personal data.

2. What we collect, and why

We only collect what we need to run the service:

When	What	Why
You create an account	Name, email address, password (stored hashed — we can't read it), the date you accepted our Terms	To give you access to your courses and contact you about your account
You buy a course	Your email, what you bought, the amount, payment and receipt references. Card details go straight to Stripe — we never see or store them.	To process payment, grant access, issue receipts, handle refunds and keep tax records
You study	Lessons watched, where you stopped, lessons completed, documents downloaded	To save your progress and to apply our Refund Policy
You download a PDF	Your name and email are printed on the copy you download	To discourage sharing of paid materials. The stamped copy is deleted from our storage after 24 hours.
You request our free guide	Email address, and whether you ticked “send me tips”	To send the guide, and — only if you opted in — occasional tips and course news
You use the contact form	Name, email, your message	To reply to you. Messages are forwarded to our inbox and not stored in our database.
You sign up for a webinar	The details asked on the Google Form (e.g. name, email, level)	To send you the webinar link and reminders
Any visit	A one-way hash of your IP address (kept for 2 days); Cloudflare Turnstile checks on our forms	To stop spam and abuse

We don't use advertising trackers or analytics cookies, and we don't sell your personal data.

3. Consent and children

By giving us your details through a form, you agree to us using them for the purpose shown at that form. Marketing emails are only sent if you opt in, and every one has an unsubscribe link.

Many of our students are under 18. If you are under 18, please make sure a parent or guardian agrees before you create an account or buy a course — and if you are under 13, a parent or guardian should create the account or give their consent for you. Parents and guardians can contact us at aseanacademyedu@gmail.com to see, correct or delete their child's data.

4. Who we share it with

We use trusted service providers to run the site. They process data for us under contract and only for that purpose:

Supabase — database, login and file storage
Vercel — website hosting
Stripe — card payments, receipts and fraud prevention
Resend — sending emails
Bunny.net — streaming course videos
Cloudflare — Turnstile spam protection on our forms
Google — webinar sign-up forms and our email inbox

We may also disclose data where the law requires it, or to protect our rights (for example, in a payment dispute).

5. Transfers outside Singapore

Some of these providers store or process data outside Singapore — including in the United States and the European Union. When that happens we take reasonable steps (such as contractual safeguards) so your data gets a standard of protection comparable to the PDPA.

6. How long we keep it

Account and progress data — while your account is open. Delete your account and it is removed.
Purchase records — 5 years after the purchase, for tax and accounting.
Free-guide sign-ups — up to 24 months after we last emailed you, or until you unsubscribe and ask us to delete them.
Stamped PDF copies — 24 hours.
Hashed IP addresses — 2 days.
Contact-form messages — in our inbox for as long as needed to deal with your enquiry.

7. How we protect it

Data is encrypted in transit (HTTPS), access to our database is restricted by row-level security, passwords are hashed, and paid files are only available through short-lived signed links. If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as the PDPA requires.

8. Your rights

You can ask us to:

tell you what personal data we hold about you and how we have used it;
correct anything that is wrong (you can change your name yourself in Settings);
stop sending you marketing — use the unsubscribe link in any email;
withdraw your consent, or delete your account and data.

Email aseanacademyedu@gmail.com. We aim to reply within 30 days. If we can no longer provide a service without some data (for example, an account without an email), we'll explain this before acting on your request.

If you live outside Singapore — for example in Indonesia, Malaysia, the Philippines, Thailand or Vietnam — you may have additional rights under your local data protection law. Contact us and we will help.

9. Cookies

We only use cookies that the site needs to work, such as keeping you logged in. See our Cookie Policy for the full list.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version; if a change materially affects you, we'll tell you by email.