Privacy policy

Version of November 12, 2026.

This page says what data we collect when you buy and follow a Rexor Academy course, why we collect it, how long we keep it, who receives it, and what you can ask of us. We do not sell your data, and we do no targeted advertising.

1. Who is responsible for your data

REXOR GROUP LLC, a limited liability company formed in the State of New Mexico, USA, is the data controller. Rexor Academy is one of its brands.

Contact: contact@rexorgroup.com, 8206 Louisiana Blvd NE, Ste A #9493, Albuquerque, NM 87113, USA

2. The data we collect

• Your name and email address. You give them at checkout. We use them for your purchase and to log you in.
• Your purchase. The offer, the price, the date, and the exact text of the waiver box you checked at checkout.
• Login link tokens. Each login link we email you contains a token that is valid for 15 minutes. We store it only as a hash, not as the token itself.
• Lessons you open. Which lesson, and the date you first opened it. We need this to apply the refund rule.
• Downloads. Which lesson, which file, and the date.
• Access records. The network your IP address belongs to, shortened and stored only as a hash; the country; and your browser, stored only as a hash. We never store your full IP address in readable form.
• Messages to the coach. The exact text of each message, its date, and its order in the conversation.

We do not record your answers to the placement test. We never see your card number: a payment provider processes the payment.

3. Cookies

The site uses one cookie, named academie. It keeps you logged in, it is strictly necessary for the site to work, and it lasts 30 days. There are no advertising cookies and no analytics cookies.

Paid links in the course go through a redirect address on our site (/go/…). We set no tracker on them and keep no record of who clicks. The site you land on may set its own trackers, under its own policy.

4. Messages to the coach

The coach is an AI. To produce its reply, your message is sent, through an intermediary, to the provider of an AI model. Send the coach only what you are willing to have processed that way.

We keep coach messages for 12 months, then delete them. The AI model provider and the intermediary that relays your messages to it, both in the United States, receive the text of your messages, with their date and order, and the text of the exercise; they do not receive your name or email address.

5. Protection against copying

To protect the course against copying and account sharing, we do three things.

• Visible marking. Every HTML file you download shows your name, your email address, and your purchase number at the top and at the bottom. Every MP3 file carries the same three details in its file information, the tag an audio player displays, and not in the sound itself.
• Invisible marking. The text you read online and the HTML files you download carry an invisible mark that identifies the purchase. The MP3 files do not carry one.
• Alerts. An alert is raised when an account downloads 50 files in 24 hours, or when it is seen from 6 networks or 3 countries in 7 days. A person reviews every alert. Nothing blocks your access automatically.

The honest limit: no protection can stop someone from copying text that is displayed on a screen. The mark does not prevent a leak; it makes a leak traceable to the purchase it came from.

6. Why we use your data, and on what legal basis

• The contract with you. Your account, your access, the refund, downloads, and the coach.
• A legal obligation. Keeping the accounting records of your purchase.
• Our legitimate interest in protecting the course against copying and sharing: access records, marks, and alerts. You can object to this use; see section 10.

7. How long we keep it

• Login link tokens: valid for 15 minutes, stored only as a hash.
• Session cookie: 30 days.
• Access records: 90 days.
• Accounting records of your purchase, including the text of the box you checked: 10 years after the end of the year of the purchase.
• Messages to the coach: 12 months, then they are deleted.
• Your account (name, email address, access): for as long as your access stays open, or until you ask us to delete it. Your purchase is then still kept as an accounting record.
• Opened lessons, downloads, and alerts: 12 months.

8. Who receives your data

• Hosting: Cloudflare (United States).
• Payment provider: Stripe (United States)
• Email delivery provider: it receives your email address and the text of the emails we send you.
• Provider of the coach's AI model, and the intermediary that relays your messages to it (United States).

We do not sell your data, and we do not share it for advertising.

9. Transfers outside the European Union

We are established in the United States and process your data there; you send it to us directly. In the United States, we share your data only with providers that participate in the EU-U.S. Data Privacy Framework or that commit to the European Commission's standard contractual clauses.

10. Your rights

You can ask us to:

• give you access to your data;
• correct it;
• erase it;
• restrict how we use it;
• stop a use that rests on our legitimate interest (your right to object);
• hand your data over in a format you can take elsewhere (portability).

To use any of these rights, write to contact@rexorgroup.com. You can also file a complaint with the data protection authority of your country.