1. Who We Are
EDRIMS Limited ("EDRIMS", "we") operates edrims.io, a course marketplace. This policy explains what personal data we collect, why, who receives it, and your rights. Contact for privacy matters: privacy@edrims.io
2. What We Collect
- Identity and contact: name, email address, phone/WhatsApp number — collected when you opt in to a funnel or purchase a course.
- Payment information: handled entirely by our payment providers. We record transaction amounts and references; we never see or store your card number.
- Payout details (creators and affiliates): bank account number, account name, and bank — required to pay you.
- Marketing attribution: campaign parameters (UTM tags) and click identifiers (such as Meta's fbclid) attached to the link you arrived through.
- Usage and behaviour: pages visited, video watch progress, funnel steps reached, and anonymous aggregate statistics.
- Questions you ask the AI Teaching Assistant, stored with your account to maintain conversation context.
- Technical data: IP address and browser information, recorded for security, fraud prevention, and affiliate click verification.
3. How We Use It
To deliver courses and account access; process payments and refunds; send transactional notifications (purchase confirmations, payment reminders, refund notices) by WhatsApp and email; attribute sales to affiliates and ad campaigns; operate the AI Teaching Assistant; secure the platform; and, where a course creator runs follow-up sequences, send you recovery emails about a purchase you started.
By providing your phone number at checkout, you consent to receiving transactional WhatsApp messages about your purchase and account.
4. Who Receives Your Data
We share personal data only as needed to operate the platform:
- Payment providers (currently Paystack): your identity and payment details, to process transactions.
- Meta (Facebook): when a course creator uses Meta advertising, conversion events are sent to Meta via the Meta Pixel and Conversions API. This includes hashed email and phone number, and technical data such as IP address, browser information, and click identifiers, used to measure and improve ad delivery.
- OpenAI: when you use the AI Teaching Assistant, your question and name are processed by OpenAI to generate the answer. Course content is also processed to power course-specific answers.
- Vector search (Pinecone): course content is indexed to power course-specific AI answers. No student personal data is stored there.
- Email provider (MailerSend): your email address and message content, to deliver email.
- WhatsApp delivery: your phone number and message content are processed by our WhatsApp messaging provider to deliver notifications.
- Video hosting (Bunny.net): your IP address reaches the video delivery network when you stream lessons.
- Creator-connected tools: course creators may connect their own CRM or marketing systems to their sales funnels. If you opt in or purchase through such a funnel, your contact details (name, email, phone) and funnel activity may be delivered to the creator's chosen system. The creator is responsible for that system's data handling.
We do not sell your personal data. Some of the providers above process data outside Nigeria.
5. Cookies and Local Storage
We use cookies for: keeping you logged in (session and refresh tokens); affiliate attribution (30 days); a visitor identifier used for pricing and device recognition (30 days); and security controls. Your browser's local storage remembers video playback position and interface state. We do not use third-party advertising cookies on our own behalf; Meta's Pixel operates on funnels where a creator has enabled it.
6. Data Retention
We retain account, purchase, and transaction records for as long as your account exists and as required for financial and legal compliance. Refunding a course removes your enrolment and community membership for that course. Administrative audit records are retained for a minimum of five years. To request deletion of your account and personal data, contact privacy@edrims.io — we will action requests within a reasonable period, subject to records we must legally retain (such as transaction history).
7. Your Rights
Under the Nigeria Data Protection Regulation, you may request access to, correction of, or deletion of your personal data, and may object to certain processing. Send requests to privacy@edrims.io. You can opt out of non-essential notifications from your account settings.
8. Security
Passwords are stored hashed. Sensitive credentials and tokens are encrypted at rest. Payment card data never touches our systems.
9. Changes
We will update this policy as the platform evolves and notify you of material changes.