ReactJav Online School Privacy Policy

1. Scope & Educational Mission

ReactJav School operates an international digital academy and technical vocational institution. We provide comprehensive education in Software Engineering, AI & Data Science, Cloud Infrastructure, Game Development, and UI/UX Architecture.

This Privacy Policy applies to all services provided under the ReactJav brand, including:

• The public course catalog and syllabus previews located at /courses.
• The gated Campus Intranet, lesson player, and in-browser code sandboxes at /intranet.
• The Computer-Based Testing (CBT) certification examination system at /cbt.
• Direct 1-on-1 tutoring, code-pairing sessions, and attendance tracking at /academy and /tutoring.
• Student dashboards, tuition sponsorships, and billing facilities at /subscribe.

2. Data Controller & Governance

ReactJav School is the designated Data Controller responsible for your personal information. We maintain rigorous administrative, technical, and physical safeguards designed to guarantee the confidentiality, integrity, and availability of all learner and institutional records.

We adhere to strict data-minimization principles: we only collect information directly necessary to establish student enrollment, administer examinations, issue verified credentials, and guarantee safe, proctored virtual learning environments.

3. Personal & Academic Data We Collect

Depending on your persona (student, parent/guardian, or instructor), we collect the following categories of data:

4. How We Process & Use Your Information

We process your data strictly on the lawful bases of Contractual Performance (delivering tuition and courses), Legal Compliance, and Explicit Consent:

• Curriculum Delivery: Granting authenticated access to enrolled video streams, interactive syllabi, and cloud sandboxes.
• Certification: Evaluating exam answers, computing GPA/grades, and rendering verifiable certificates of technical accomplishment.
• Mentorship Scheduling: Coordinating live audio/video breakout rooms and pairing fellows with qualified instructors.
• Financial Auditing & Grants: Verifying eligibility for foundation-backed sponsorship grants and processing tuition subscriptions.
• Security & Abuse Prevention: Detecting fraudulent exam circumvention, unauthorized account sharing, and network intrusions.

5. Proctored CBT & Assessment Integrity

ReactJav certificates carry weight with international engineering employers because our Computer-Based Testing (CBT) engine enforces strict proctoring integrity. During a timed assessment:

• We record countdown telemetry, question transition velocity, and answer selections.
• Browser window focus and tab switches may be logged to guarantee test isolation.
• We do NOT install invasive spyware, kernel-level drivers, or record continuous ambient room video without permission. Proctoring telemetry is deleted or archived once certification grades are verified.

6. Children & Minors Privacy (COPPA & GDPR-K Compliance)

ReactJav Academy proudly offers foundational coding tracks for younger learners (Zone 01: Junior Dev, ages 5–10; and Zone 02: Teens, ages 11–17). In compliance with the Children’s Online Privacy Protection Act (COPPA) and international child privacy regulations:

7. PostgreSQL Row-Level Security & Technical Controls

Unlike conventional platforms that rely purely on application-level routing, ReactJav implements database-grade security architecture:

• PostgreSQL Row-Level Security (RLS): Every student database table enforces strict policies requiring auth.uid() = user_id. No user or fellow can read or query records belonging to another student.
• End-to-End Transport Encryption: All platform data in transit is encrypted with TLS 1.3/HTTPS using modern SHA-256 cipher suites.
• Encrypted At-Rest Storage: Database volumes, backup archives, and code sandboxes are encrypted at rest using AES-256 standards.
• Zero Plaintext Passwords: Authentication utilizes cryptographically secure salted hashes through enterprise Supabase Auth infrastructure.

8. Subprocessors & Service Providers

We never sell or rent your personal information. We only share necessary data with trusted cloud infrastructure providers who agree to identical data protection covenants:

• Supabase: Managed PostgreSQL cloud database, authentication service, and row-level security policy engine.
• Vercel: Global serverless edge hosting and dynamic application routing.
• Daily / WebRTC: Peer-to-peer real-time video and audio streaming for live breakout classrooms.

9. Data Retention & Erasure

We retain active student accounts for as long as you maintain enrollment or certification status with ReactJav. Upon student withdrawal or account deletion requests:

• Authentication identifiers and personal profile details are permanently purged within 30 calendar days.
• Issued certificate verification records (certificate serial numbers and milestone proofs) remain permanently verifiable so that your past achievements remain valid for prospective employers.

10. Your Statutory Rights & Data Portability

As a ReactJav scholar or parent, you enjoy comprehensive data protection rights:

11. Contact Our Data Protection Officer

For privacy inquiries, parental consent verification, or exercising your statutory rights under GDPR, NDPR, or COPPA, please contact our Institutional Data Protection Office: