Software Defined Factory

Introduction

Software Defined Factory (“we”, “our”, or “us”) operates the website softwaredefinedfactory.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, create an account, subscribe to our newsletter, use our tools, or purchase our courses.

By using the Site, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Site.

Information We Collect

Information You Provide

We collect information you voluntarily provide when you:

Create an account: email address, password, and optionally your full name
Subscribe to our newsletter: email address and optionally your name
Use our tools: data you enter into calculators (e.g. the ROI Calculator), and optionally your email address if you choose to receive results by email
Purchase a course: payment information is processed directly by Stripe and is not stored on our servers
Contact us: any information you include in messages sent to us

Information Collected Automatically

When you visit the Site, we may automatically collect:

Usage data: pages visited, time spent on pages, referring URLs, and general navigation patterns via Vercel Analytics (privacy-friendly, no cookies, no personal data tracking)
Device information: browser type, operating system, and screen resolution (aggregated, not personally identifiable)

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Site and our services
Create and manage your user account
Process course purchases and manage enrolments
Send you newsletters and educational content (only if you subscribe)
Respond to your enquiries and provide support
Track your course progress and learning history
Analyse Site usage to improve content and user experience
Prevent fraud and ensure Site security

Third-Party Services

We use the following third-party services that may process your data:

Supabase (Authentication & Database)

We use Supabase to manage user accounts and store application data. Supabase processes your email address and account information. Their privacy policy is available at supabase.com/privacy.

Stripe (Payment Processing)

Course payments are processed by Stripe. We do not store your credit card details. Stripe's privacy policy is available at stripe.com/privacy.

Vercel (Hosting & Analytics)

Our Site is hosted on Vercel. We use Vercel Analytics, which is a privacy-friendly analytics solution that does not use cookies and does not collect personally identifiable information. Vercel's privacy policy is available at vercel.com/legal/privacy-policy.

ConvertKit (Email Newsletter)

If you subscribe to our newsletter, your email address is shared with ConvertKit for email delivery. ConvertKit's privacy policy is available at convertkit.com/privacy.

Resend (Transactional Email)

We use Resend to send transactional emails such as password resets, purchase confirmations, and account notifications. Resend's privacy policy is available at resend.com/legal/privacy-policy.

YouTube (Video Content)

Course videos are hosted on YouTube. When you watch embedded videos, YouTube may collect data in accordance with Google's privacy policy at policies.google.com/privacy.

Cookies

We use minimal cookies that are essential for the Site to function:

Authentication cookies: to keep you logged in to your account
Theme preference: to remember your light/dark mode choice

We do not use advertising cookies or third-party tracking cookies. Vercel Analytics does not use cookies.

Data Retention

Account data: retained for as long as your account is active. You may request deletion at any time.
Newsletter subscriptions: retained until you unsubscribe. You can unsubscribe at any time using the link in any email.
Course enrolment and progress data: retained for as long as your account is active to support your learning history.
Payment records: retained as required by applicable tax and accounting laws.
Analytics data: aggregated and anonymised, retained indefinitely.

Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Delete your personal data and account
Export your data in a portable format
Withdraw consent for data processing (e.g. unsubscribe from emails)
Object to certain types of data processing

To exercise any of these rights, please contact us at the email address below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

Encrypted data transmission (HTTPS/TLS)
Row-level security policies on our database
Secure authentication via Supabase Auth
Regular security updates to our software dependencies

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Children's Privacy

The Site is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information.

International Data Transfers

Your data may be processed in countries other than your own, including the United States, where our hosting and service providers operate. By using the Site, you consent to the transfer of your information to these countries.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised “Last updated” date. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: privacy@softwaredefinedfactory.com