Privacy Policy

Last Updated: 30 March 2026

This Privacy Policy (the “Privacy Policy”) is designed to provide you with disclosures regarding the processing of your personal data in relation to the services provided by EdTech Plus B.V. and /or when you visit or interact with our website — https://academy.nebius.com/ and https://futurecoding.ai/ (“Nebius Academy”; “we,” “us,” or the “Service,” respectively). The Service is governed by the Terms of Use available at https://docs.academy.nebius.com/terms-of-use/ or by a separately signed hard-copy agreement (the “Agreement”).

This Privacy Policy applies to all information about you that we collect in connection with the Service, and explains what personal data we may collect, how we may use and share it, how we safeguard it, and how you may exercise your rights related to your personal data under applicable privacy laws, such as the EU General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”), the Israeli Protection of Privacy Law, 5741-1981 (“IPPL”), and the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (effective January 1, 2023) (collectively, the “Data Protection Laws”).

You are not legally required to provide us with any personal data. Providing your personal data is voluntary. However, if you do not provide certain data, we may be unable to provide some or all the services or derogate the level of their performance.

We may amend this Privacy Policy from time to time, at our discretion. The most recent version of this Privacy Policy will always be posted on our website, and the date of the latest update will be reflected in the “Last updated” heading. We will provide notice to you if these changes are material. Unless stated otherwise, any amendments to the Privacy Policy take effect upon posting. We recommend that you review this Privacy Policy periodically to ensure that you understand our current privacy practices.

Terms and Definitions

This Privacy Policy uses the key terms as defined by the EU General Data Protection Regulation (GDPR). Unless we explicitly state otherwise, these terms carry the same meanings and must be interpreted in accordance with the GDPR. Under the “Learn more” button, you can review detailed definitions of the terminology we use.

Learn more

GDPR: This term stands for General Data Protection Regulation, the EU Regulation (EU) 2016/679 of the European Parliament and of the Council, adopted on 27 April 2016 and in force since 25 May 2018. It sets uniform rules across the European Union for the processing of personal data and the protection of individuals’ privacy rights.
Personal data: This term means any information relating to an identified or identifiable natural person (“data subject”).
Controller: This term means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Performance of the contract: This term refers to the legal basis provided under Article 6(1)(b) of the GDPR. It means that the processing of personal data is necessary for the performance of a contract between you as a data subject and us, or to take steps at your request before entering a contract.
Consent: This term means any freely given, specific informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
Legal obligation: This term refers to the legal basis provided under Article 6(1)(c) of the GDPR. It means that the processing of personal data is necessary for compliance with a legal obligation to which we, as the controller, are subject.
Legitimate interest: This term refers to the legal basis provided under Article 6(1)(f) of the GDPR. It means that the processing of personal data is necessary for the legitimate interests pursued by us or a third party. However, we want to clarify that we do not rely on this legal basis unless we have determined that our interests are not overridden by your interests or fundamental rights and freedoms as the data subject that require protection of personal data.
The standard contractual clauses approved by the EU Commission (SCC): This term refers to the appropriate safeguard for transfer of personal data to a third country provided under Article 46(2)(c) of the GDPR. For the purposes hereof, a third country is a country which is not in the EEA territory and is not recognized by the EU Commission as a country that ensures an adequate level of protection.

1. Controller

The data controller (as defined under the applicable Data Protection Laws) regarding personal data processed under this Privacy Policy is EdTech Plus B.V., incorporated under the laws of the Netherlands, with its registered address at Gustav Mahlerlaan 300, 1082 ME Amsterdam, the Netherlands.

You can contact us with any questions relating to the processing of your personal data under this Privacy Policy by email: support.academy@nebius.com.

2. Categories of Personal Data Processed by Nebius Academy

Nebius Academy processes personal data provided by you and/or collected when you use our Service and/or interact with our website.

Data Subjects	Category	Description
Users	Registration Data	To create a user account and access certain features of the Service, you may need to provide certain personal data. This may include full name; email address; phone number; residential address; age; ZIP code; and other registration and authentication data (e.g., account credentials).
Students	Student Data	If you enrol to a Nebius Academy program, we may collect certain additional information about you to provide the Service, administer your participation, and comply with applicable requirements. This may include: information about your selected programs; program attendance and progress; feedback you provide about the programs; payment status and related billing metadata (we do not store full payment card details); your field of activity or occupation; employment status; academic degree(s), highest level of education, and field of study.
Tutors	Tutor Data	Nebius Academy may make limited information about its tutors available to users of the Service. This information may include: full name; educational background; city (or region) of residence; area of expertise; and professional experience.
Graduating students	Student Data	Nebius Academy may already hold most or all this information; however, some personal data may have changed over time, and we may update our records to maintain accuracy. We retain such information for a limited period and only as necessary for the purposes described in this Privacy Policy, in compliance with applicable laws.
Users, students, visitors of the website	Cookies	Nebius Academy uses cookies, including web beacons (aka “pixels”), and other tracking codes on the platform to improve the quality of your user experience (“Cookie”, or “Cookies”). A cookie is a small, very frequently used text file that the browser installs on your device when you visit a website and then sends information about your visit back to the website when you visit it again. Information collected by cookies may include browser information, Internet activity, and usage data. You can learn more about cookies in our Cookie Notice.
Users, students, visitors of the website, participants of Nebius Academy events, subscribers	Other Data	When you use the Service or interact with the Nebius Academy team or our website, you may choose to provide us with certain personal data about yourself. In particular, this may occur when you contact our support team regarding various matters or subscribe to informational or promotional communications about the Service. For these purposes, we may collect your name and contact details. Please note that none of these activities require you to register for an account.
Users, students, participant of live sessions	Session Data	When you participate in live sessions (e.g., tutoring calls) we may collect and process audio and video recordings; chat sent during the session; automatically generated transcript and session metadata.
Students	AI interaction data	We may process personal data while deploying AI systems to support our service: Code submissions and programming project files submitted for AI grading. Provide the students the possibility to test their prompts in the AI Chat to see how the LLM reacts. Provide text feedback for quizzes, but not grading. * Our AI Chat feature includes free-text input fields. You must avoid the inclusion of personal data in chat interactions.

Sensitive (special category) personal data. We do not intentionally collect sensitive personal data (as defined under applicable law, including the GDPR “special categories” and the CCPA “sensitive personal information”), such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric data for identification, health data, or data concerning sex life or sexual orientation, and we ask that you do not provide such information. If you voluntarily provide such data (for example, to request accessibility accommodations), we will process it only where permitted by law, solely for the purpose for which it was provided, for a limited period, and subject to appropriate safeguards.

3. Purposes and Legal Bases for Processing

We process your personal data only where we have a valid legal basis, as set out below:

Performance of the Contract. We may process your personal data to provide, operate, and support the Service under the Agreement; manage your account; communicate with you about the Service.

Legitimate Interests. We may process your personal data when we have a legitimate interest that is not overridden by your interests or fundamental rights and freedoms. These interests may include Service improvement and analytics, information security and fraud prevention.

Consent. Where required by applicable laws, we process your personal data with your consent. You may withdraw your consent at any time by emailing us at support.academy@nebius.com or by using the unsubscribe link in our marketing emails; withdrawal will not affect the lawfulness of processing before withdrawal.

Legal Obligations. We process your personal data where necessary to comply with our legal and regulatory obligations (for example, tax, or record-keeping requirements).

The table below sets out (i) Nebius Academy’s purposes for processing your personal data; (ii) the corresponding legal bases; and (iii) the categories of personal data used for each purpose.

Purpose for processing your data	Legal Basis	Categories of personal data used for the purpose
Provision of the Services	Contract	Registration data, Student data
Provision of educational and career opportunities for graduate students	Consent	Graduates’ data with respect to education and professional qualification
Improvement of the Service	Legitimate Interest	Registration data, Student data, Other data, Cookies
Informing current and prospective students about courses, programs, events, and other educational opportunities	Consent; Legitimate Interest (where applicable)	Student data, Registration data (with the data subject's consent), Other data, Tutor data
To protect the security and integrity of our systems and network; detect, investigate, and prevent security incidents; and protect against activities that pose safety risks or are malicious, deceptive, fraudulent, or illegal	Legitimate Interest	Other data, Student data, Registration data, Cookies, Tutor data
To comply with applicable laws, regulations, and legal processes, and to respond to lawful requests from law enforcement, courts, regulators, or other authorities	Legal Obligation	Registration data, Student data, Other data, Tutor data
To establish, exercise, or defend legal claims	Legitimate Interest	Registration data, Student data, Other data, Cookies, Tutor data
To conduct business planning, reporting, and forecasting	Legitimate Interest	Registration data, Student data, Other data, Cookies, Tutor data
To conduct research, contests, surveys	Legitimate Interest; Consent	Registration data, Student data, Graduates’ data, Other data, Tutor data
To record video conferences and chat communications for service delivery, training, quality assurance, and dispute resolution.	Consent; Contract	Users’ and Students’ correspondence and communications with Nebius Academy’s customer service
To perform post session analysis of recordings and transcripts to evaluate sessions instructional quality, clarity, pace and participant engagement against predefined criteria	Consent	Students
AI Educational Assessment	Consent	Code submission or Free text
AI-Assisted Educational Support	Consent	Data sent via the AI chat

4. How We Collect Your Personal Data

Depending on how you interact with the Service, we may collect personal data from the following sources:

Automatically. We may use cookies and similar tracking technologies (e.g., pixels) to gather certain information automatically when you interact with the Service, as described in our Cookie Notice.
Directly from you (voluntarily). We collect information that you choose to provide, such as contact-us communications, account registration details.
From third parties. Where permitted by law, we may receive information about you from service providers (e.g., payment processors), and - if applicable - your employer when they sponsor or administer your enrolment.

5. Information we share with third parties

We disclose certain personal data to the recipients listed below to the extent required or permitted by applicable law and/or where necessary to operate the Service and our business (including based on legitimate interests), and subject to appropriate safeguards:

Tutors and academic staff, to the extent necessary to provide the Services (e.g., program administration, mentoring, grading);
affiliate entities of Nebius Academy which are a part of the same group of companies to the extent required to provide the Services;
Partners offering educational and career opportunities for students (e.g., internship);
Service providers (processors) that support the Service, such as IT and engineering, hosting and cloud storage, customer support and ticketing, communications tools (e.g., recording/transcription tools, AI API), automation and orchestration tools, marketing and sales support, analytics, security and fraud-prevention, payment processing, legal advisers, accountants, and auditors;
Public authorities and law enforcement, strictly as needed to respond to lawful requests and to comply with legal obligations;
Loans and financial services providers;
Other third parties where required to comply with applicable laws, to protect the rights and safety of Nebius Academy, our users, or others, or to detect, prevent, or address fraud or security issues;
Business transfers: in connection with a corporate transaction (e.g., merger, acquisition, financing, reorganization, or sale of assets), including during related negotiations.

Third-party communications platforms. Where we use third-party services to communicate with you, we share your personal data with those providers, and their privacy policies apply.

Advertising and cross-context behavioural advertising. Where permitted by law and subject to your choices, we may share limited personal data with advertising and marketing partners to support interest-based/targeted and cross-context behavioral advertising (see our Cookie Notice for details and opt-out options).

No “sale” of personal data (CCPA/CPRA). We do not “sell” personal information as that term is defined under the CCPA/CPRA. Where our activities constitute “sharing” for cross-context behavioural advertising, you may opt out at any time (e.g., via our cookie settings).

Payment processing. When you purchase our programs or other offerings, you may be redirected to third-party payment service providers. We receive only limited information about your transaction (e.g., payment status, transaction ID, amount, and — where relevant — the last four digits of a card) and do not have access to or store full payment card numbers or security codes. Those providers independently collect and process your payment details in accordance with their own privacy policies, which are not controlled by Nebius Academy. Where invoices or offline payments are used, we may process necessary billing details (e.g., name, billing address, tax/VAT identifiers) for accounting and compliance purposes.

6. Links to Third-Party Sites and Content

This Privacy Policy explains how we collect, use, protect, and disclose personal data in connection with the Service. However, the Service may include links to or integrations with websites, apps, and content operated by third parties. These may include videoconferencing platforms that enable participation via video, audio, phone, and chat using your internet-connected device. Such services are provided by independent third-party providers, may require separate registration, and are outside our control. Certain sessions may include a cle

Please note that this Privacy Policy does not govern the practices of those third parties even where their services are branded as, or provided on behalf of, Nebius Academy. Information collected from you by third parties (including websites you access via links in the Service) is governed by their own privacy policies and terms. If you click a third-party link, you will be directed to that third party’s site. We strongly encourage you to review the applicable privacy policies, terms, and privacy settings for every third-party service you use. Where you choose to use third-party tools to access our programs, those providers typically act as independent controllers (unless expressly stated otherwise) and are solely responsible for their processing activities. Do not share your third-party account credentials with us. Where third-party content is embedded in the Service, those providers may collect data via cookies and similar technologies as described in our Cookie Notice. Links are provided for convenience only and do not imply endorsement.

WE DO NOT CONTROL, AND ASSUME NO RESPONSIBILITY FOR, THE CONTENT, PRIVACY POLICIES, OR PRACTICES OF ANY THIRD-PARTY SITES OR SERVICES.

7. How Your Personal Data is Stored, Transferred, and Secured

International Data Transfers

We store your personal data primarily in the European Union (“EU”).

However, because we operate globally, we may process and transfer your personal data to Nebius Academy affiliates and trusted third parties in other countries for the purposes described in this Privacy Policy. Whenever we do so, we implement appropriate safeguards to protect your personal data in accordance with applicable law.

When transferring personal data outside the EU/European Economic Area (“EEA”), we ensure an adequate level of protection by, among other things:

Verifying that the transfer complies with applicable data protection laws;
Using the SCC or other lawful transfer mechanisms;
Relying on adequacy decisions issued by the European Commission, where available;
Implementing supplementary measures (e.g., encryption in transit and at rest, access controls, pseudonymization) and conducting data transfer impact assessments, where required;
Applying internal policies and role-based access controls to limit access to personal data and ensure staff awareness and training.

Storage and retention of personal data

We retain personal data only for as long as necessary to fulfil the purposes described in Section 2 of this Privacy Policy (including to comply with legal, regulatory, tax, or accounting requirements), after which we will delete or anonymize it. Anonymized data may be retained and used by Nebius Academy without limitation, provided it does not identify you.

We may also retain personal data for longer where: (i) required by law or regulation; (ii) necessary to establish, exercise, or defend legal claims or to maintain accurate records of your interactions with us (e.g., for complaints or audits); or (iii) reasonably necessary for fraud prevention or security. Except where the law requires a specific retention period, we are not obligated to retain personal data for any particular length of time and may delete it when it is no longer needed.

If you would like us to delete your personal data, please contact us using the email address specified in Section 1 of this Privacy Policy. We will process your request in accordance with applicable law.

Security of personal data

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include, as appropriate, encryption, access controls, network and application security, logging and monitoring, segregation of environments, vulnerability management, and staff training. We also require our service providers to implement appropriate security measures and to process personal data only on our instructions.

That said, no security system is impenetrable. To the extent permitted by law, we cannot guarantee absolute security or be responsible for unauthorized access that is beyond our reasonable control. Where required by law, we will notify you and/or the relevant authorities of a data breach. Access to personal data is restricted to authorized personnel and third parties identified in Section 5, on a need-to-know basis and subject to confidentiality obligations.

8. Artificial Intelligence Features

Feature	Purpose	Make Automated Decisions?
AI Code Reviewer	Analyzes and grades code submissions, provides pedagogical feedback	Yes
AI feedback quiz	Provides text feedback but no grading on the quiz. The feedback is based on the evaluation criteria determined for the lesson, without having a significant effect on the student as the student can keep going with the course.	No
AI Chat	Provide the students the possibility to test their prompts in the LLM to see how the LLM reacts.	No

AI COMPONENTS

AI Components	Description	Input	Output
AI Code Reviewer	When you submit a coding project for assessment, our AI Code Reviewer analyzes your submission against the project requirements. It identifies errors, evaluates your code's correctness and style, and provides detailed feedback designed to support your learning.	Your code submission, project instructions, and relevant educational materials. Your name and other personal identifiers are removed before your submission is sent to the AI system.	This system produces grades that affect your course progress (pass/revision-needed). These decisions are subject to meaningful human oversight as described below.
AI feedback quiz	"AI Feedback Quiz" feature is designed to act as an encouraging learning coach, providing criteria-driven, constructive feedback on open-ended learner responses (recommendations).	The answer to a quiz question in free text form	LLM-created formative feedback to support reflection and deeper learning. LLM is prompted to provide feedback based on the rubrics and parameters set by Nebius Academy curriculum team individually for each quiz task.
AI Chat Assistant	You can test the prompt you created in the LLM to see how the LLM reacts.	Student prompt (no personal data shall be included in the prompt)	LLM response to the student prompt.

Human Oversight and Your Rights

For AI features that produce automated decisions affecting your course progress (AI Code Reviewer), you have the following rights:

Right to Human Review: You may request human review of any AI-generated grade, and a qualified human reviewer will re-evaluate your work.
Right to Explanation: You may request an explanation of how the AI reached its decision regarding your submission.
Right to Challenge: You may challenge any grade you believe to be incorrect through the human review process.

To exercise any of these rights contact us at [contact details].

Data Use

Anonymized interaction data may be used internally by Nebius Academy to improve our AI prompts, educational content, and retrieval systems. This data does not leave our control for model training purposes.

98. Cookies

As outlined in our Cookie Notice, we use cookies and similar technologies such as pixels, ad tags, and local storage to improve your experience, provide convenience, maintain security and serve you tailored ads. For simplicity, we call all these tools “cookies.” In practice, cookies support functions like authentication, security, feature enablement, advertising and analytics. There are two types of cookies: first‑party cookies set by us, and third‑party cookies set by our vetted partners.

We collect marketing and analytics cookies based on your consent obtained via the cookie banner. If you’ve granted consent for cookies, you may modify or withdraw that consent at any time via the “Manage cookies” option on our website.

109. Your Rights

According to the GDPR, you have certain rights as a data subject, including the right to access, right to data portability, right to rectification, right to withdraw consent, right to object, right to erasure, right to restriction of processing, right to lodge a complaint, and right to contact a Data Protection Authority (DPA). Please be aware that there may be limitations or exceptions to these rights, depending on the specific circumstances and legal requirements. If anything is unclear, please don't hesitate to contact us and ask any questions. Below, you can find more information about these rights and how you can exercise them.

Right of Access
You may request access to the personal data we hold about you. We’ll provide details about how and why we process your data, the categories of data involved, any recipients, and other relevant information.
Right to Data Portability
You may receive the personal data you’ve provided to us in a structured, commonly used, machine‑readable format, and you can request that we transmit it directly to another controller where technically feasible.
Right to Rectification
If you believe your personal data is inaccurate or incomplete, you may request that we correct or update it.
Right to Withdraw Consent
If our processing relies on your consent, you can withdraw it at any time. Withdrawal won’t affect the lawfulness of any processing carried out before you withdrew consent.
Right to Object
You can object to our processing based on legitimate interests or for direct marketing. We will stop processing unless we have compelling legitimate grounds or a legal requirement to continue. Objections to direct marketing are always honoured.
Right to Erasure (“Right to Be Forgotten”)
You may request deletion of your personal data unless processing is necessary for freedom of expression and information, compliance with a legal obligation, public‑interest tasks, or the establishment, exercise, or defence of legal claims.
Right to Restrict Processing
You may request that we suspend processing of your personal data if:
- You contest its accuracy;
- The processing is unlawful, and you oppose erasure;
- We no longer need it, but you require it to establish, exercise, or defend legal claims; or
- You have objected to processing pending verification of our legitimate grounds.
Right to Lodge a Complaint
You may lodge a complaint with the supervisory authority in your country of residence, or with our lead supervisory authority - the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), if you believe we have infringed your rights. You can find a list of local data protection authorities here; for Israel – https://www.gov.il/en/departments/the_privacy_protection_authority/govil-landing-page.

Once you submit a request, we will review and respond promptly - typically within 30 days. In certain cases, we may need additional time to investigate and fulfil your request. Once completed, we will confirm via the email address you provided.

By submitting a request, you confirm that you are the individual to whom the data relates and that you have the legal capacity and authority to act on your own behalf. We may verify your identity using the information you supply if there is any doubt. Additionally, where required by law, we may need to share your request and our response with third parties, including regulatory authorities.

110. Children

Our website and services are not intended for use by individuals under the age of 18. We do not knowingly collect or process personal data from anyone under 18. If you are a parent or guardian of a minor and believe we have collected their data, you may contact us to exercise their rights as described in this Privacy Policy.

121. Difficulty Accessing this Privacy Policy

If you have a disability and cannot access our Privacy Policy online, please contact us (using the details in the Section 1) to request a copy in an alternative, more accessible format. We will not collect or process any health‑related or other sensitive personal data in connection with such requests.

132. United States of America–Specific Privacy Provisions

A. Privacy Information for California Residents

This section of the Privacy Policy applies only with regard to California residents. When applicable, this section shall prevail over all other parts of the Privacy Policy in case of discrepancies.

Personal Information Collected over the Last 12 Months

Categories of Data Collected	Data collected from you and why it was collected
Identifiers	Depending on the category of the subject as defined in Section 2, we may collect: full name; email address; phone number; residential address; age; ZIP code; and other registration and authentication data (e.g., account credentials)
Characteristic of protected classifications under California or Federal law.	None
Commercial information	Record of services purchased or considered for purchase from Nebius Academy
Geolocation Data	None
Financial Information	None. Note that we use third party payment processors to facilitate your payments and do not store your payment card information
Biometric Data	None
Audio, electronic, visual, thermal, olfactory, or similar information	Audio and video may be recorded during online calls, and transcripts of such recording may be generated provided that the party being recorded has given their consent. Recordings and transcripts will be used to perform post-session analysis to evaluate sessions’ instructional quality, clarity, pace, and participant engagement against predefined criteria.
Internet/Network Activity	As described in Section 8 (Cookies)
Professional or Employment-related Information	Depending on the category of the data subject as defined in Section 2, we may collect: your field of activity or occupation; employment status
Education Information	Academic degree(s), highest level of education, and field of study
Device Information	Operating system, browser type, device ID (with consent)

Categories of Personal Information Sold in the last 12 months:

We do not sell your personal information to third parties.

Categories of Personal Information Disclosed over the last 12 months

Categories of Data Disclosed	Types of Entities to which Data was Disclosed	Reason for Disclosure of Data	Categories of Recipients
Identifiers, Characteristic of protected classifications under California and federal law, Commercial Information, Internet/Network Activity, Professional, employment-related, and education Information	Please see the Section 5	Provision of the services, improvement of the services, informing current and potential students about programs and educational opportunities, to protect the security and integrity of our network and to detect, investigate and prevent activities that may violate our policies and terms, pose safety issues, or be fraudulent or illegal, for marketing, promotion, and advertising purposes, to comply with legal obligations and law enforcement requests, to establish, exercise, or defend legal claims, to conduct business planning, reporting, and forecasting; to conduct research, contests, surveys	Please see the Section 5

Information we sell

Nebius Academy does not sell your personal information to third parties. “Sale” excludes transfers that occur as part of a merger, acquisition, asset sale or other similar business transaction involving all or part of Nebius Academy. In such cases, your personal information may be transferred to the acquiring entity. If a transaction will materially change how we process your personal information, we will notify you beforehand.

Your California Privacy Rights

We have implemented policies and procedures to help facilitate the exercise of privacy rights available to California residents under applicable law. If you are a California resident, you are entitled to the rights described in Section 9 of this Privacy Policy. In addition, you may be entitled to the following:

Disclosure of Direct Marketers

Learn more
California law allows California residents once a year to request information regarding our disclosure of your personal information, if any, to third parties for those third parties’ direct marketing purposes during the preceding calendar year. This information includes:
a. The categories of information we disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year;

b. The names and addresses of third parties that received the information; and

c. If the nature of the third party’s business cannot be determined from their name, to obtain examples of the products or services marketed.

Right to Information About Collecting, Selling, Sharing, or Disclosing Personal Information

Learn more

Upon receipt of a verifiable request, you may obtain a list of:

the specific pieces of your personal information that Nebius Academy holds;
- the categories of personal information collected about you, sold to third parties, or disclosed to third parties for business purposes;
- the categories of personal information sold within the last 12 months;
- the categories of sources from which personal information is collected;
- the business or commercial purpose for collecting or selling personal information; and
- the categories of third parties with whom personal information is shared, sold, or disclosed for a business purpose.

Learn more

Right to Opt-Out of the Sale of Personal Information

California residents have the right to opt-out of the sale of their personal information under certain circumstances.

Learn more

Right to Non-Discrimination

As defined under relevant law, you have a right to non-discrimination in the services or quality of services you receive from us for exercising your rights.

Please contact us with the use of contact details specified in Section 15 of this Privacy Policy if you wish to exercise these rights. Note that we may ask you to verify your identity - such as by requiring you to provide information about yourself - before responding to such requests.

Submitting a Verifiable Request under the CCPA

Learn more
California residents have certain rights regarding their personal information under the California Consumer Privacy Act of 2018 ("CCPA"). Nebius Academy will respond to an individual's "verifiable request" to exercise their rights under the CCPA - that is, when Nebius Academy has received a request purporting to be from a particular individual, and Nebius Academy has been able to verify the individual's identity. The need to verify an individual's identity is crucial to protecting your information and ensuring that it is not shared with someone pretending to be you or not authorized to act on your behalf.

You may submit a verifiable request using the contact details specified in Section 15 of this Privacy Policy. To process your request, we will ask you to provide information to help us verify your identity. This information may include your name, address, whether you have an account with Nebius Academy, and any other information deemed necessary to reasonably verify your identity.

Once we have your submission, we will compare the information you provide to the information we have on file to verify your identity. If necessary, we may request additional information if we have difficulty confirming your identity.

We will not share your information or fulfil any requests if we are unable to confirm that a request is a "verifiable request". If we cannot verify your identity, we will not be able to process your request.

Submitting a request through an authorized agent

Learn more
Under California law, a California resident can appoint an “authorized agent” to submit certain verifiable requests on their behalf, such as the right to know what information we collect or to request the deletion of the consumer's information. An authorized agent may submit a request by following the steps outlined above.

An authorized agent may submit a request by following the steps outlined above. However, the agent must identify the consumer they are acting on behalf of and provide the information necessary for us to verify the consumer’s identity. Additionally, we will require the authorized agent to submit proof of their authorization to act on the consumer’s behalf.

To ensure the security and privacy of your information, we will request that you provide written consent for the person acting as your authorized agent. This consent may include us contacting you directly to confirm that the individual claiming to be your agent has your permission to access or delete your information. We will also verify your identity independently to ensure that an unauthorized person is not attempting to exercise your rights without permission.

We will not share your information or honour any requests in situations where you have not provided written authorization for an agent to act on your behalf, or where we are unable to verify your identity.

Submitting a Request for Removal of Minor Information

Learn more
To request the removal of information about a minor from Nebius Academy, parents or guardians may submit a request with the subject line “Removal of Minor Information.” This request must come from the minor’s parent or guardian; minors themselves may not submit information to us via email.

Your submission should include the following details:

the nature of your request
- the identity of the content or information to be removed
- whether the content or information is found
- the location of the content or information (e.g., providing the URL of the specific web page where the content or information is found)
- a statement that the request is related to the “Removal of Minor Information”
- your name, street address, city, state, ZIP code, and email address

If we become aware that a minor has provided personal data or otherwise used by Nebius Academy in violation of the Privacy Policy, we will take steps to remove that information.

Please note that our websites and services are not intended for use by individuals under the age of 18.

B. Privacy Information for Residents of other States (Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia):

Unless otherwise stated by the law of your state of residence, the provisions in Chapter A “Privacy Information for California Residents” will apply to the processing of your data. If you have questions related to your rights or any other aspects of this Privacy Policy, please contact us as outlined in Section 1.

Your Rights under various United States state data privacy laws such as the Colorado Privacy Act, Connecticut Data Privacy Act, Delaware Personal Data Privacy Act, Indiana Consumer Data Protection Act, Iowa Consumer Data Protection Act, Kentucky Consumer Data Protection Act, Maryland Online Data Privacy Act, Minnesota Consumer Data Privacy Act, Montana Consumer Data Privacy Act, Nebraska Data Privacy Act, New Hampshire SB 255, New Jersey SB 332, Oregon Consumer Privacy Act, Tennessee Information Protection Act, Texas Data Privacy and Security Act, Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act.

For residents from the states of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia this section allows you to exercise your rights under the applicable state law.

Right to Confirm: The right to confirm whether your personal data is being processed.

Right to Access / Disclosure: The right to have access to your personal data upon simple request – that is, you may receive a copy of such data upon receipt of a verifiable request, along with other information related to the processing of your data.

Right to Data Portability: the right to obtain, move, copy, or transfer data as defined by applicable law.

Right to Correction/Rectification: The right to correct your personal data if you find it is inaccurate, incomplete, or obsolete.

Right to Deletion: The right to obtain the deletion of your personal data in the situations set forth by applicable data protection law.

Right to Opt-Out: The right to opt out of the processing of your personal data for targeted advertising, as defined by applicable law as well as the right to opt out of the processing of sensitive data as defined by applicable law. Certain applicable laws also permit the right to opt out of the sale of personal data and profiling.

Right to Appeal: You may also have the right to appeal the denial of any of these rights by submitting a form that will be provided to you if we deny a data request.

Submitting a Verifiable Request under the United States’ State Laws.

Learn more

Residents of the above-mentioned states have certain rights regarding their personal information under applicable law. Nebius Academy will respond to an individual's "verifiable request" to exercise their rights under these applicable laws — that is, when Nebius Academy has received a request purporting to be from a particular individual, and Nebius Academy has been able to verify the individual's identity. The need to verify an individual's identity is crucial to protecting your information and ensuring that it is not shared with someone pretending to be you or not authorized to act on your behalf.

Not all requests will be fulfilled. Nebius Academy is committed to complying with each and every data privacy protection law. However, in some circumstances, consumers are not entitled to certain requests. Nebius Academy will hear all appeals if an appeal right is permitted under applicable law (e.g. the Tennessee Information Protection Act).

C. Profiling Disclosure

Certain features of our platform involve automated decision-making as described in the "Artificial Intelligence Features" section above. Specifically, our AI Code Reviewer and AI Free Text Evaluator produce grades and assessments that may affect your course progress.

We have implemented the following safeguards to protect your rights:

Human oversight: All AI grading decisions are subject to human review upon your request. To exercise this right contact us at [contact details].
Transparency: You have the right to receive an explanation of how the AI system reached its decision.
Right to challenge: You may contest any automated decision through our human review process.

We do not engage in profiling of consumers in furtherance of automated decisions that produce legal or similarly significant effects, as those terms are defined under the Colorado Privacy Act.

D. Data Protection Assessments

Nebius Academy will conduct all necessary data protection assessments for all applicable processing or other activities when required by applicable law