Privacy policy.
We sell content protection: it would be inconsistent to be opaque about people’s data. Here is what we collect and why, in plain language.
Who processes your data
The data controller is Giampiero Virago, Italian tax code VRGGPR97C25I577F. For any request about your data you can write to the contact address at the bottom of this page.
If you join the waitlist
We collect your first name, last name, email, the role you indicate and any message you write. If you complete your Pilot registration, we also save your answers about published courses, platforms, students and average course price with your account. We use this information to contact you about Tea and understand how you use the platform: no transfer to third parties, no advertising profiling.
We also record your browser and an encrypted, non-reversible version of your IP address, to defend ourselves from automated submissions. The plain IP address is never stored.
The legal basis is your consent, which you give by submitting the form. You can withdraw it at any time by asking us to delete your data: it is erased within thirty days.
If you have an account
We keep your email, name and role so you can sign in, and a unique identification code that is shown as an overlay on the videos you watch.
We record the devices you sign in from (browser type and operating system, never a hardware identifier), sign-ins and playback: what you watched, when, from which device and for how long. Here too the IP address is stored only in encrypted form.
The legal basis is the performance of the contract and the legitimate interest in protecting creators’ content from unauthorized distribution.
Who can see what
The creator of a course you are enrolled in can see your email and name and — if they investigate a leaked piece of content — your playback of that course. They cannot see your identification code: they can only check whether a code they have already found matches you.
No other user of the platform can see your data.
Where the data is and for how long
Data is hosted on Supabase, in a data center in the European Union (Ireland), and the site is served by Vercel. Account data is kept as long as you keep the account; security and playback logs are kept for the time needed to investigate possible abuse.
Your rights
At any time you can ask to access your data, correct it, delete it, restrict its processing, receive it in a readable format, or object to its processing. Write to us and we will reply within thirty days. If you believe your data is being handled improperly, you can contact the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Cookies
We use only technical cookies and storage for sign-in, device limits, language and cookie preferences. No advertising cookies or third-party tracking. Cookie choices are recorded separately from accounts: see the cookie policy for tools, retention periods and how to change your choice.
Contact
To exercise your rights or for any question about your data: hi@heytea.app
This page is a translation of the Italian version, which is the reference text.