Privacy Policy

Last updated: May 28, 2026

This Privacy Policy explains how Space Education ("we," "us," "our") collects, uses, and protects your personal information when you use www.spacereschool.com and our online courses.

1. Information We Collect

Information you provide

  • Account details: name, email address, password (stored as a salted hash).
  • Address: only when you generate your completion certificate (entered on the certificate page).
  • Payment info: processed by Stripe. We do not store your credit card number; we receive only a Stripe customer ID and last 4 digits.
  • Communications: emails or WeChat messages you send to us for support.

Information collected automatically

  • Video watch time: tracked per video for compliance with the 40-hour MA requirement (anti-skip).
  • Test attempts: your answers, scores, time taken.
  • AI tutor chats: stored to provide context-aware responses; not used to train external AI models.
  • Server logs: IP address, browser type, pages visited, time stamps (kept for 30 days for security/debugging).

2. How We Use Your Information

  • Deliver the course content you purchased.
  • Track your progress toward state-required hours.
  • Generate your Certificate of Completion with your name, email, and address.
  • Send transactional emails (purchase receipts, welcome emails, live class reminders).
  • Respond to support inquiries.
  • Improve the Service (aggregated, anonymized analytics).
  • Comply with legal obligations (e.g., responding to lawful subpoenas).

3. Third-Party Service Providers

We use the following services to operate the Service. They have access to limited information necessary to perform their function:

  • Stripe: payment processing.
  • Vercel: hosting our website.
  • Neon (PostgreSQL): our database.
  • Cloudflare Stream: video hosting and playback.
  • Anthropic Claude: powers the AI tutor ("Xiao Chen"). Your messages are sent to Anthropic for inference but, per Anthropic's policy, are not used to train their models.
  • Resend: transactional email delivery.
  • Zoom: live class video conferencing (live sessions only).

Each provider has its own privacy policy. We choose providers with strong privacy practices and only share what is needed.

4. Cookies

We use essential cookies to keep you logged in (NextAuth session cookie). We do not currently use third-party advertising or tracking cookies. If we add analytics or marketing tools in the future, we will update this policy.

5. Data Retention

  • Account data: retained as long as your account exists, since you have lifetime access to your course.
  • Video progress and test attempts: retained for the lifetime of your account.
  • Payment records: retained per Stripe's policy and tax/legal requirements (typically 7 years).
  • Server logs: 30 days.

You may request deletion of your account at any time (see Section 7).

6. Security

  • All traffic to www.spacereschool.com is encrypted via HTTPS/TLS.
  • Passwords are stored as bcrypt hashes; we never see your plaintext password.
  • Database connections use TLS with SSL certificate verification.
  • Sensitive credentials (API keys) are stored encrypted on Vercel.

No system is 100% secure. If you suspect unauthorized access to your account, please email admin@spacereschool.com immediately.

7. Your Rights

You have the right to:

  • Access: request a copy of the personal information we hold about you.
  • Correct: ask us to update inaccurate information.
  • Delete: request deletion of your account and associated data. Note: this is irreversible and will revoke your access to purchased courses.
  • Export: request your data in a portable format.
  • Opt out: unsubscribe from non-essential emails. Transactional emails (purchase receipts, certificates) cannot be opted out of while your account is active.

To exercise any of these rights, email admin@spacereschool.com from your registered email address. We will respond within 30 days.

8. Children

Our Service is intended for users 18 years and older. We do not knowingly collect data from children under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it.

9. International Users

Space Education operates in the United States. Our servers and most third-party providers are located in the U.S. If you access the Service from outside the U.S., you consent to your data being processed in the U.S.

10. California Residents (CCPA)

Under the California Consumer Privacy Act, California residents have additional rights regarding their personal information, including the right to know what data is collected and the right to request deletion. We do not sell personal information. To exercise CCPA rights, contact admin@spacereschool.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to your registered address. The "Last updated" date at the top reflects when this policy was last revised.

12. Contact

Questions about your privacy or this policy? Reach us at: