Privacy Policy | VanKlass – Learn English For Real

Vanklass | Odessos Systems Inc Effective Date: April 1, 2025

1. Introduction

Odessos Systems Inc ("Company," "we," "us," or "our") operates Vanklass, a software-as-a-service platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

Please read this policy carefully. By using Vanklass, you agree to the collection and use of information as described here. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide Directly

Account registration details (name, email address, password)
Billing and payment details submitted at checkout
Communications you send us (support requests, feedback)
Profile information and preferences you configure

2.2 Payment Information

All payment transactions are processed by our third-party payment processor:

Stripe — acts as our payment processor for your purchase. Stripe collects and processes your payment card details, billing address, device data, IP address, and transaction data for fraud prevention and payment processing. Their privacy practices are governed by the Stripe Privacy Policy.

We do not store your full payment card number on our servers. We receive only a tokenized reference and limited transaction metadata (e.g., last 4 digits, card brand, transaction ID).

2.3 Information Collected Automatically

Log data: IP address, browser type, operating system, pages visited, time and date of visits, referring URLs
Device identifiers and browser fingerprinting data used for security purposes
Usage data: features accessed, clicks, session duration, and in-app behavior
Cookies and similar tracking technologies (see Section 7)

2.4 Information from Third Parties

We may receive information about you from the following third-party services we use to operate the Service:

Analytics providers (Google Analytics, PostHog)
Advertising and measurement partners (Google Ads, Meta Platforms (Facebook/Instagram Pixel))
Error tracking services (Sentry)

We do not use a third-party email marketing or CRM provider. Our marketing email and contact management run on software we host ourselves, described in Section 2.5.

2.5 Marketing Automation and Profiling

We operate our own instance of Mautic, an open-source marketing automation platform, on infrastructure we control. It is not a third-party service: your data is not handed to a marketing vendor, and no external company processes it on our behalf.

When you have given marketing consent, Mautic sets a cookie (mtc_id) that identifies your browser and records:

The pages you view on our site and the date and time of each visit
The page or campaign that referred you
Your IP address and general location derived from it

None of this happens unless you grant marketing consent via our cookie banner. If you decline, no Mautic cookie is set and no visits are recorded.

If you later submit a form on our site — for example, our contact form — we link the browsing history already held against that cookie to the contact record created from the details you provide, including your name and email address. Activity that was previously pseudonymous therefore becomes associated with you as an identified person. We use the resulting profile to:

Understand which pages and campaigns lead people to get in touch
Decide which marketing emails are relevant to send you
Measure whether our marketing is working

We do not use this profile to make automated decisions that produce legal or similarly significant effects about you. You may object to this profiling, or ask us to delete the profile entirely, at any time using the contact details in Section 15.

Withdrawing marketing consent through the Cookie preferences link in our footer stops all further Mautic tracking and removes the identifying cookie from your browser.

3. How We Use Your Information

We use the information we collect for the following purposes:

To create and manage your account and provide the Service
To process payments and fulfill subscription transactions via Stripe
To send transactional emails (receipts, account confirmations, subscription updates)
To send marketing and promotional communications (you may opt out at any time)
To analyze usage patterns and improve the performance and features of Vanklass
To detect, investigate, and prevent fraudulent or unauthorized activity
To comply with legal obligations, including tax and financial reporting requirements
To respond to your support requests and communicate with you

4. Legal Basis for Processing (International Users)

Although Odessos Systems Inc is based in the United States, Vanklass may be accessed by users in the European Economic Area (EEA) and United Kingdom. Where applicable under the GDPR or UK GDPR, we process your personal data on the following legal bases:

Contract: Processing necessary to provide the Service you have signed up for
Legitimate Interests: Analytics, security, fraud prevention, and service improvement
Consent: Marketing communications and non-essential cookies
Legal Obligation: Tax, financial reporting, and regulatory compliance

We do not sell your personal information. We may share your information with:

5.1 Payment Processors

Stripe receives the information necessary to process your payment and support tax and compliance requirements across jurisdictions.

5.2 Service Providers

We share data with vetted third-party vendors who help us operate the Service:

Analytics: Google Analytics, PostHog — for usage insights and product improvement
Advertising and measurement: Google Ads, Meta Platforms (Facebook/Instagram Pixel) — to measure ad performance, attribute conversions, and reach relevant audiences. These services rely on cookies and similar identifiers and fire only after you grant marketing consent via the cookie banner.
Error Tracking: Sentry — to monitor and diagnose application errors
Hosting and infrastructure: our hosting provider stores the data described in this policy on servers we administer. It acts as a processor and does not use your data for its own purposes.

Marketing automation is not outsourced. We run Mautic ourselves (see Section 2.5), so your contact record, engagement history, and the content of our marketing emails are not disclosed to any third-party marketing or CRM platform.

All service providers are contractually required to handle your data securely and only for the purpose of providing services to us.

5.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity. We will notify you via email or prominent notice on the Service prior to such a transfer.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We also retain data as necessary to comply with legal obligations (e.g., tax records required by the IRS), resolve disputes, and enforce our agreements.

Upon account deletion, we will delete or anonymize your personal data within 90 days, except where retention is required by law. Payment transaction records may be retained for up to 7 years for tax and accounting purposes.

If you contacted us or joined a marketing list without creating an account, we retain your contact record and its associated engagement history for up to 24 months after your last interaction with us, after which it is deleted. You may request earlier deletion at any time.

7. Cookies and Tracking Technologies

Vanklass uses cookies and similar technologies to operate the Service and improve your experience. We use the following categories:

Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
Analytics Cookies: Used by Google Analytics and PostHog to understand how users interact with Vanklass. You may opt out via browser settings or the opt-out tools provided by those services.
Marketing Cookies: Used to measure the effectiveness of our marketing campaigns via Google Ads, the Meta (Facebook) Pixel, and to recognize your browser in our self-hosted Mautic instance (mtc_id, mtc_sid). These cookies are set only after you grant marketing consent. You may opt out at any time via the Cookie preferences link in the footer.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.

8. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

TLS/HTTPS encryption for all data in transit
Encryption of sensitive data at rest
Access controls and authentication requirements for our internal systems
Regular security reviews and vulnerability assessments

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

9.1 All Users

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal information, subject to legal retention obligations
Opt-Out of Marketing: Unsubscribe from marketing emails at any time via the unsubscribe link in our emails

9.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected and shared, the right to delete your personal information, and the right to opt out of the sale or sharing of personal information. We do not sell personal information. To exercise your rights, contact us at the address below.

If you are located in the EEA or UK, you have rights to data portability, restriction of processing, and the right to lodge a complaint with your local supervisory authority. You may also withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at: [email protected]

10. International Data Transfers

Odessos Systems Inc is based in the United States. If you access Vanklass from outside the United States, your information will be transferred to and processed in the US. We rely on lawful transfer mechanisms (such as Standard Contractual Clauses for EEA/UK users) where required by applicable law.

Our payment processor (Stripe) may also transfer data internationally as part of its global operations, subject to its own privacy safeguards.

11. Children's Privacy

Vanklass is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.

12. Third-Party Links and Services

Our Service may contain links to third-party websites or integrate with third-party tools. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through Vanklass.

13. Governing Law

This policy is governed by the laws of the State of Delaware, United States.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date at the top of this document. For material changes, we will provide additional notice via email or an in-app notification at least 30 days before the change takes effect.

Your continued use of Vanklass after the effective date of a revised policy constitutes your acceptance of the changes.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Odessos Systems Inc A Delaware C-Corporation Product: Vanklass Email: [email protected] Website: https://vanklass.com

For payment-related privacy questions, you may also contact:

Stripe, Inc.: https://stripe.com/privacy