Privacy Policy

Spi-Math (Spiraling Math OÜ)

Last updated: 03/03/2026

1. Who We Are

This website is operated by:

Spiraling Math OÜ

Registered in Estonia (EU)

Company Registration No: 14104246

Email: info@spi-math.com

Website: www.spi-math.com

www.spi-math.net

Spiraling Math OÜ is the “Data Controller” of your personal data under the EU General Data Protection Regulation (GDPR).

2. What Personal Data We Collect

We may collect the following categories of personal data:

2.1 Account Information

Full name
Email address
Username
Password (encrypted)

2.2 Payment Information

Payments are processed through third-party providers.

Spi-Math does NOT store full credit card details.

We may receive:

Billing status
Transaction confirmation
Subscription details

2.3 Usage Data

IP address
Device type
Browser type
Pages visited
Login activity

2.4 Communications

Emails sent to us
Support requests
Feedback

3. Why We Collect Your Data (Legal Basis)

Under GDPR, we must explain the legal basis for processing your data.

We process your data for:

3.1 Contractual Necessity

To:

Create and manage your account
Provide access to paid courses
Process payments

3.2 Legitimate Interest

To:

Improve our platform
Prevent fraud
Ensure platform security

3.3 Legal Obligation

To:

Comply with EU and Estonian laws
Maintain accounting records

3.4 ConsentFor:

Marketing emails (if you opt in)
Cookies beyond essential functionality

4. Children’s Privacy

Spi-Math provides services for students under 18.

If you are under 18:

You must have parental or guardian consent.
A parent or guardian is responsible for supervising your use.

We do not knowingly collect unnecessary data from children.

Parents may contact us to request data review or deletion.

5. How We Use Your Data

We use your data to:

Provide educational content
Manage subscriptions
Send account notifications
Improve user experience
Respond to inquiries
Send marketing emails (only if you consent)

6. Data Sharing

We do NOT sell personal data.

We may share data with:

Payment processors
Website hosting providers
Email service providers
Analytics providers (e.g., Google Analytics)

All third parties are required to comply with GDPR standards.

7. International Data Transfers

As an EU-based company, your data may be processed within the European Union.

If data is transferred outside the EU, we ensure appropriate safeguards such as:

Standard Contractual Clauses (SCCs)
GDPR-compliant service providers

8. Data Retention

We retain personal data:

For as long as your account is active
As required by accounting and tax laws
Until deletion is requested (where legally permissible)

After that, data is securely deleted or anonymized.

9. Your Rights Under GDPR

As an EU data subject, you have the right to:

Access your data
Correct inaccurate data
Request deletion (“Right to be Forgotten”)
Restrict processing
Object to processing
Data portability
Withdraw consent at any time

To exercise your rights, contact:
info@spi-math.com

10. Cookies

Spi-Math uses cookies for:

Essential website functionality
Analytics
User preferences

You may manage cookie preferences through your browser settings or cookie banner.

For more details, see our Cookie Policy.

11. Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

Secure hosting
Encrypted passwords
Secure payment processing
Access controls

However, no online system is 100% secure.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

Updates will be posted on this page with a revised date.

Continued use of the Website indicates acceptance of changes.

13. Contact Information

If you have any privacy-related questions, contact:

info@spi-math.com

You also have the right to lodge a complaint with the Estonian Data Protection Authority if you believe your data is being processed unlawfully.