Legal
Privacy Policy
Last updated 20 May 2026
1. Who we are
RGM Academy is operated by Effekt Group Oy, a private limited company registered in Finland, at Hyvinkää, 05720, Finland. Effekt Group Oy is the data controller for the personal data described here. Given the size of the operation we are not required to appoint a Data Protection Officer. For any privacy question you can reach us at hello@rgmacademy.app.
2. What we collect, why, and for how long
We collect only what we need to run the platform. For each type of data, here is what we hold, the legal basis under the GDPR, and how long we keep it.
| Data | Why we hold it (legal basis) | How long |
|---|---|---|
| Account data: your email and a securely hashed password | To create your account and sign you in (performance of our contract with you) | While your account is active, then deleted or anonymised |
| Learning data: progress, points, lesson completion, simulator settings | To deliver the course and track your progress (contract) | While your account is active |
| Payment data: a Stripe customer reference, not your card number | To process your subscription (contract) | For the life of the subscription, plus the period that tax and accounting law requires |
| AI Strategist inputs: simulator settings and any text you submit | To generate the coaching you ask for (contract) | Sent to our AI provider per request; we do not keep a separate copy beyond short operational logs |
| Communications: emails you send us, and your newsletter choice | To reply to you (legitimate interest) and to send the newsletter if you opt in (consent) | Until you unsubscribe or ask us to delete |
| Technical and analytics data: device, approximate location, usage | To keep the platform secure (legitimate interest) and understand usage (consent) | Up to the analytics provider's standard period, see cookies below |
You can withdraw consent at any time.
3. Who we share data with
We use a small set of trusted providers to run the platform. Each one receives only the data it needs. We do not sell your personal data.
| Provider | Purpose | What they receive |
|---|---|---|
| Supabase | Account, sign-in, and learning data storage | Email, hashed password, progress data |
| Stripe | Subscription payments | Email and the payment details you enter with Stripe |
| Anthropic | Powers the AI RGM Strategist | Your simulator settings and any text you submit to it |
| Resend | Sends account and product emails | Your email address |
| Beehiiv | Sends the newsletter, only if you opt in | Your email address |
| Vercel | Hosting and content delivery | Technical request data such as IP address |
| Google Analytics | Site usage analytics | Pseudonymous usage and device data |
| Sentry | Error monitoring | Technical error data, which can include your account identifier |
| Crisp | Live chat support, when enabled | What you type in chat and basic contact details |
4. International transfers
Some of these providers are based outside the EU and EEA, including in the United States. Where your data is transferred internationally, we rely on the safeguards those providers put in place, in particular the European Commission's Standard Contractual Clauses.
5. Cookies
Essential cookies keep you signed in and the platform working, and do not need consent. Analytics cookies are only set with your consent, which you can give or withdraw through our cookie settings.
| Cookie | Purpose | Lifetime |
|---|---|---|
| sb-[project]-auth-token | Keeps you signed in (essential) | Session, refreshed while you stay logged in |
| _ga | Google Analytics: tells return visits apart (analytics, set with consent) | Up to 2 years |
| _ga_[id] | Google Analytics 4 session state (analytics, set with consent) | Up to 2 years |
| Cookie preference | Remembers your cookie choices | Up to 12 months |
6. Your rights
Under the GDPR you have the right to access your data, to correct it, to have it erased, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw consent at any time. Email hello@rgmacademy.app and we will respond. You can unsubscribe from the newsletter with the link in any newsletter email.
If you believe we have handled your data wrongly, you can complain to the Office of the Data Protection Ombudsman (tietosuoja.fi), the Finnish supervisory authority, or to the data protection authority in your own country.
7. Children
RGM Academy is built for working professionals and is not intended for anyone under 16. We do not knowingly collect data from children.
8. Security
We protect your data with measures such as encryption in transit, hashed passwords, access controls, and isolated payment handling through Stripe. No system is perfectly secure, but we take this seriously, and we will tell you and the relevant authority about a breach affecting your data where the law requires it.
9. Changes to this policy
We may update this policy as the platform changes. We will post the new version here with an updated date and tell account holders about material changes.
10. Contact
For any privacy question, or to exercise your rights, email hello@rgmacademy.app. You can also read our Terms of Service.
Effective 20 May 2026. Effekt Group Oy, Hyvinkää, 05720, Finland.