Privacy Policy
Last updated: 08 April 2026
1. Data We Collect
When you use REAPER Learn we collect:
• Account data: email address, username, hashed password
• Profile data: name, company, country (if you provide it)
• Usage data: analyses run, sessions created, features used
• Terminal data: commands and outputs you submit for analysis
• KYC data: certification details (Pro tier applicants only)
• Payment data: handled entirely by Stripe — we never see your card details
2. How We Use Your Data
We use your data to:
• Provide and improve the Service
• Send essential account emails (verification, password reset)
• Enforce usage limits and billing
• Detect and prevent abuse
• Improve AI guidance quality (anonymised aggregate patterns only)
We do not sell your data to third parties. We do not use your data for advertising.
3. AI and Conversation Data
Your conversations with the AI mentor and terminal analyses are stored to provide session memory and improve your experience. This data is:
• Associated with your account
• Not used to train AI models without your explicit consent
• Not shared with third parties
• Deletable upon request
We use Anthropic as our AI provider. Requests are processed per Anthropic's data processing terms.
4. Data Retention
We retain your data for as long as your account is active. Upon account deletion:
• Account and profile data: deleted within 30 days
• Session and conversation data: deleted within 30 days
• KYC documents: deleted immediately upon verification
• Anonymised aggregate patterns: retained (no personal data)
• Billing records: retained for 7 years (legal requirement)
5. Data Storage and Security
Your data is stored on servers in the European Union (Hetzner, Germany) in compliance with GDPR. We implement industry-standard security measures including encryption at rest, TLS in transit, and access controls.
6. Your Rights (GDPR)
If you are in the European Economic Area, you have the right to:
• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Object to processing
• Lodge a complaint with your supervisory authority
To exercise these rights, email [email protected]
7. Cookies
We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies. We use Cloudflare for security which may set its own cookies — see Cloudflare's privacy policy for details.
8. Third-Party Services
We use the following third-party services:
• Anthropic — AI processing (privacy.anthropic.com)
• Stripe — payment processing (stripe.com/privacy)
• Cloudflare — security and CDN (cloudflare.com/privacypolicy)
• Resend — email delivery (resend.com/privacy)
• Hetzner — server hosting (hetzner.com/legal/privacy-policy)
9. Contact
For privacy questions or data requests: [email protected]