DiplomaHub Privacy Policy

1. Who This Applies To

DiplomaHub is intended for users 13 years of age or older. If you are under the age of majority in your jurisdiction, you confirm that you have permission from a parent or guardian to use the Platform, where required by local law.

We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

2. Information We Collect

Information you provide directly:

• Account information (name, email address, password — handled via Supabase Auth)
• Profile information (IB year/grade, bio, if provided)
• Content you submit (discussion posts, articles, resources, comments)
• Communications with us (support requests, feedback)

Information collected automatically:

• Basic usage data (pages visited, actions taken, timestamps) for the purpose of improving the Platform
• Standard technical data (IP address, browser type, device type) collected by our hosting provider (Vercel) and database provider (Supabase)

We do not use third-party advertising trackers or sell user data to advertisers.

3. How We Use Information

We use collected information to:

• Create and manage your account
• Display your public profile, posts, and contributions to other users
• Operate reputation/trust features (e.g., contribution history, badges)
• Improve and maintain the Platform
• Communicate with you about your account or platform updates
• Enforce our Terms of Service and keep the community safe

4. How Information Is Shared

• Other users: Your profile, posts, discussions, and published resources are visible to other users of the Platform (and, for public pages, to visitors without an account), depending on your privacy settings.
• Service providers: We use Supabase (database, authentication, storage) and Vercel (hosting) to operate the Platform. These providers process data on our behalf under their own security and privacy commitments.
• Legal requirements: We may disclose information if required by law, or to protect the rights, safety, or property of DiplomaHub, our users, or others.
• We do not sell your personal information to third parties.

5. Data Retention

We retain account and content data for as long as your account is active. You may request deletion of your account and associated personal data at any time by contacting us (see Section 10). Some content (e.g., discussion replies) may be retained in anonymized form to preserve conversation context.

6. Legal Basis for Processing (GDPR)

DiplomaHub is operated from Germany, and personal data is processed in accordance with the EU General Data Protection Regulation (GDPR). We process your data on the following legal bases:

• Contract(Art. 6(1)(b) GDPR): to create your account and provide the Platform's core features
• Legitimate interests (Art. 6(1)(f) GDPR): to maintain security, prevent abuse, and improve the Platform
• Consent (Art. 6(1)(a) GDPR): where you opt into optional features (e.g., a newsletter), which you may withdraw at any time
• Legal obligation (Art. 6(1)(c) GDPR): where processing is required to comply with applicable law

7. International Users & Data Transfers

DiplomaHub is used by IB students and alumni globally. By using the Platform, you understand that your information may be processed and stored in a country other than your own, including outside the EEA, depending on where our service providers (e.g., Supabase, Vercel) operate their infrastructure. Where personal data is transferred outside the EEA, we rely on appropriate safeguards recognized under GDPR, such as Standard Contractual Clauses, to protect your data.

8. Your Rights (GDPR)

If you are located in the EEA, UK, or another jurisdiction with similar data protection laws, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Eraseyour data ("right to be forgotten"), subject to certain exceptions
• Restrict or object to certain processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data protection authority (in Germany, the relevant Landesdatenschutzbehörde for your state, or the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI))

To exercise any of these rights, contact us using the details in Section 10.

9. Your Choices

• You can access and update most profile information directly in your account settings.
• You can request a copy of your data, correction, or account deletion by contacting us.
• You can control what information appears on your public profile.

10. Contact Us

Questions about this Privacy Policy or your data, or requests to exercise your rights under Section 8, can be directed to: info@diplomahub.org

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

12. Data Controller

The data controller responsible for your personal data under this Privacy Policy is:

ANDY NATHAN PIEUME TCHIYEP — info@diplomahub.org