Privacy policy

1. Who is responsible

The controller of personal data processed through masterclass.tv is the administrator of the masterclass.tv service ("we", "us"). Contact for every privacy matter: [email protected].

When you buy a ticket, the expert who teaches the class receives some of your data (section 5) and becomes a separate, independent controller of it for their own purposes, such as contacting attendees about their classes. Their own privacy practices apply to that use.

2. What we collect

• Account data. Email address, password (stored only as a secure hash), and, if you add them, your name, profile photo and time zone.
• Purchase data. Tickets, subscriptions, prices, dates, invoices and billing country. Card details are entered with our payment processor and never reach our servers. We receive only limited details such as card brand, last four digits and the result of the payment.
• Learning activity. Classes you joined, minutes watched live and on replay, questions you posted and upvoted, certificates earned.
• Expert data. Profile, credentials, class content and materials, payout account status, payout and tax related records required by law.
• Team data. For team plans, the company account, seat assignments, attendance and certificate reports visible to the team admin.
• Technical data. IP address, device and browser type, pages requested, error logs and security events, kept in server logs.
• Messages. Emails you send to [email protected] and our replies.

3. Why we use it and our legal bases

Purpose	Legal basis (GDPR)
Creating and running your account, delivering classes, replays, materials and certificates	Performance of a contract
Processing payments, issuing invoices, paying experts	Performance of a contract, legal obligation
Reminder emails and service messages about classes you bought	Performance of a contract
Keeping accounting and tax records	Legal obligation
Preventing fraud, abuse and chargebacks, securing the Service	Legitimate interests
Measuring and improving the Service with aggregated statistics	Legitimate interests
Product news by email, where you opted in	Consent, which you can withdraw at any time

4. What other people can see

• Questions you post in a live room are visible to everyone in the room, may be read out on air and stay on the replay page. Do not include private information in a question.
• A certificate's verification page is public and shows the name on the certificate, the class, the expert and the date. Anyone with the link or code can open it.
• Expert profiles and class pages are public.

5. Who receives your data

We share personal data only as needed to run the Service, with these categories of recipients:

• Experts whose classes you buy: your name and email address, so they can deliver the class and contact attendees.
• Team admins, if your seat is provided by your company: attendance and certificate data for that seat.
• Service providers acting on our instructions: a hosting provider, a streaming provider for live video and replays, a payment processor, an email delivery provider, error monitoring and backup storage. They may use the data only to provide their service to us, under data processing agreements.
• Authorities and advisers where the law requires it, or to establish or defend legal claims, including in chargeback disputes.
• A successor if the Service is transferred, under the same protections.

We do not sell personal data and we do not share it for cross context behavioural advertising.

6. International transfers

Some providers process data outside your country, including in the United States and the European Union. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on standard contractual clauses or another lawful transfer mechanism, together with additional safeguards where needed.

7. How long we keep it

• Account and learning data: while your account is open. After you close it we delete or anonymise it within 90 days, except as below.
• Purchase, invoice and payout records: for as long as tax and accounting law requires, usually 5 to 10 years.
• Certificates: the verification page stays available so the certificate can still be checked, unless you ask us to remove it.
• Server and security logs: up to 12 months.
• Support emails: up to 3 years after the last message.

8. Your rights

Depending on where you live, you have the right to:

• access the personal data we hold about you and get a copy in a portable format;
• correct inaccurate data;
• delete your data, subject to legal retention duties;
• restrict or object to processing based on legitimate interests;
• withdraw consent at any time, without affecting earlier processing;
• lodge a complaint with your data protection authority.

California residents. Under the CCPA as amended by the CPRA, you have the right to know what personal information we collect, use and disclose, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined, and we do not use sensitive personal information beyond what is needed to provide the Service. We will not discriminate against you for using your rights. Residents of other US states with privacy laws have similar rights, which we honour in the same way.

To use any right, email [email protected] from the address on your account. We may ask you to confirm your identity. We answer within one month (45 days for California requests), and we may extend this where the law allows. An authorised agent may make a request for you with proof of authority.

9. Cookies

We use only essential cookies that keep you signed in and protect forms. No advertising or tracking cookies, so there is no cookie banner. Details are in the cookie policy.

10. Security

We use encrypted connections, hashed passwords, access controls, regular backups and monitoring. No system is perfectly secure. If a breach affects your data, we will inform you and the authorities as the law requires.

11. Children

The Service is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, email us and we will delete it.

12. Changes

We may update this policy. The date at the top shows the latest version, and we will tell account holders about material changes by email or on the Service.

13. Contact

The administrator of the masterclass.tv service, [email protected]. See also the terms of service.