Privacy Policy.

1. INFORMATION WE COLLECT

When you register and use this platform, we collect:

• Account data: full name, email address, and WhatsApp number you provide when registering or at checkout.
• Discord identity: your Discord ID and username, only if you choose to link a Discord account to this platform.
• Payment history: what you purchased, the amount, transaction status, and payment method.
• IP address: recorded every time you open the dashboard. We use it to detect several accounts sharing the same network, and to block network addresses we have found abusing the platform.
• Trading journal: entries, notes, and chart screenshots you upload.
• MT5 account data (optional): the account number and broker server name, if you link an MT5 account for journal sync.
• Digital signature: explained on its own below, since it is the most sensitive data we hold.

2. YOUR DIGITAL SIGNATURE

When you agree to the Student Agreement, we store the signature image you draw on screen — not coordinates or stroke vectors, but a full-resolution PNG (up to about 512 KB), stored directly as data in the database, not as a separate file. A drawn signature is something you typically use for life and cannot change the way you change a password, so we treat it as sensitive data.

We only use it as evidence that you read and agreed to that agreement, on the date our server recorded automatically, not a date you typed yourself. It is no longer sent to your browser for any purpose — including when you export a trading journal PDF, which used to embed it and no longer does.

3. WHERE YOUR DATA IS STORED

Your data does not live in one place. We use four separate databases, each from a different cloud provider:

• Supabase — accounts, profiles, curriculum, enrollments, and payment history.
• Neon — trading journal, notifications, and platform settings.
• Neon (second, separate instance) — your MT5 account sync data.
• Aiven — account restriction status (suspension/ban) and IP addresses we have blocked.

All four are commercial cloud database providers that encrypt the disks their servers run on. That protects against someone stealing the physical hardware — it does not mean every column inside the database is individually encrypted. All data transmitted between your browser and our servers uses HTTPS/SSL.

4. WHO RECEIVES YOUR DATA

A handful of third-party services process your data because we rely on them to run this platform. They are service providers we pay to process data on our behalf — not buyers of your data, and we do not sell your data to anyone.

• Midtrans and DOKU (payment gateways): receive your name, email, phone number, and transaction amount to process payment.
• Resend (email service): receives your email address to send receipts, welcome emails, account verification, password resets, and renewal reminders.
• Cloudinary (image storage): receives the chart screenshots you upload to the trading journal.
• Cloudflare (network and security): receives your IP address as a normal part of how our content delivery network operates.
• Discord: receives your Discord ID and username, only if you choose to link a Discord account, to grant you the correct role on our mentoring server.

5. HOW WE USE YOUR INFORMATION

The data we collect is used to:

• Provide access to the curriculum and trading journal according to your purchase status.
• Send transactional emails: payment confirmation, account verification, password resets, and renewal reminders.
• Link your account to our mentoring Discord server, if you choose to connect it.
• Detect platform abuse through IP address — shared accounts or networks that have previously violated our rules.
• Keep evidence that you read and agreed to the Student Agreement.

6. COOKIES & SESSION RETENTION

Our platform uses cookies to retain active auth sessions (preventing constant re-authentication) and remember language localization settings (EN/ID). You may disable cookies in your browser settings, though doing so may degrade platform usability.

7. HOW LONG WE KEEP DATA

We keep your data for as long as your account is active. If your membership lapses and is not renewed, your trading journal and notes remain stored and remain readable by you — we do not delete them just because your subscription ended. Features specific to paying members lock again until you renew.

Transaction records tied to a completed purchase are kept for longer, for our own bookkeeping, even after other parts of your account are deleted.

8. YOUR RIGHTS: ACCESS AND DELETION

You can request a copy of your data, ask us to correct inaccurate data, or request that your account be deleted, by emailing support@aeternaacademy.com.

We are upfront about this: deletion today is handled manually, one request at a time, not through an automated button on the platform. We aim to complete it within 30 days of your request. Transaction records tied to a completed purchase are kept for our own bookkeeping as described in section 7 — that is the last part we remove, if removal is requested at all.

9. SECURITY

We use HTTPS for every connection to this site, and our databases are stored on servers whose providers encrypt the underlying disks. We do not sell, rent, or share your personal data for another party's commercial gain — the third parties named in section 4 only process it to run the services you use.