Privacy Policy

1. Introduction

Galaxy Gama Group ("Company", "we", "us"), a company incorporated in the State of Delaware, United States, operates the Amplix platform ("Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Service.

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account information: name, last name, email address, password (stored as a cryptographic hash, never in plain text)
• Profile information: date of birth, country, city
• Social links: GitHub profile URL, LinkedIn profile URL
• Third-party account identifiers: identifiers and usernames from linked third-party accounts (e.g., communication platforms, authentication providers)
• User content: project contributions, comments, messages, conversations in project channels, and other materials you submit through the Service

2.2 Information Generated Through Use

• Assessment data: test attempts, answers, scores, and results from technical assessments
• Skills and competencies: validated skills, experience points (XP), and skill proficiency levels
• Project activity: task contributions, sprint participation, card completions, and project milestones
• Certifications: completion records and certification eligibility data

2.3 Information Collected Automatically

• Authentication tokens: stored in your browser's local storage to maintain your session
• Language preferences: your selected interface language
• Theme preferences: your selected visual theme

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and manage your user account
• Assign you to projects and teams within the acceleration program
• Track your skills development, XP progression, and certification eligibility
• Facilitate communication between team members within project channels
• Send transactional emails (account verification, password resets, program notifications)
• Generate aggregated analytics to improve the Service
• Ensure the security and integrity of the Service

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Consent: when you create an account and accept these terms, you consent to the processing of your data as described herein
• Contract performance: processing necessary to provide the Service you have registered for, including account management, project assignment, and assessment delivery
• Legitimate interest: processing for analytics, security, fraud prevention, and Service improvement, where such processing does not override your fundamental rights and freedoms

5. Data Sharing

We may share your information with third-party service providers that help us operate the Service, including but not limited to:

• Authentication and identity verification providers
• Email delivery services for transactional communications
• Cloud hosting and infrastructure providers
• Communication platform services for team collaboration

These providers are contractually required to protect your data and may only use it for the specific purposes we have engaged them for. We do not sell your personal information to third parties.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you request account deletion, we will remove your personal information within a reasonable timeframe.

Aggregated, anonymized, and analytical data derived from your use of the Service (which does not personally identify you) will be retained indefinitely for research, analytics, and Service improvement purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete personal data
• Right to erasure: request deletion of your personal data (subject to the retention of aggregated analytical data as described in Section 6)
• Right to data portability: request a copy of your data in a structured, machine-readable format
• Right to restrict processing: request that we limit the processing of your personal data under certain circumstances
• Right to object: object to the processing of your personal data where we rely on legitimate interest as the legal basis
• Right to withdraw consent: withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

To exercise any of these rights, please contact us at hello@amplix.me. We will respond to your request within 30 days.

8. Account Deletion

You may request the deletion of your account by contacting us at hello@amplix.me. Upon deletion:

• Your personal information (name, email, profile data) will be permanently removed
• Your User Content may be anonymized rather than deleted where it forms part of collaborative projects
• Aggregated analytical data will be retained as described in Section 6

9. Cookies and Local Storage

The Service does not use traditional browser cookies for tracking. Instead, we use the browser's local storage to maintain:

• Authentication tokens for your active session
• Language and theme preferences

This information is stored locally on your device and is not transmitted to third-party tracking services.

10. Children's Privacy

The Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to these countries.

Where required by applicable law, we implement appropriate safeguards to ensure that your personal data receives an adequate level of protection regardless of where it is processed.

12. Security

We implement industry-standard security measures to protect your personal information, including:

• Passwords are stored using strong cryptographic hashing (never in plain text)
• All data is transmitted over encrypted connections (HTTPS/TLS)
• Access to personal data is restricted to authorized personnel only
• API endpoints are protected by authentication, authorization, and rate limiting

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or via email. Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Galaxy Gama Group
Email: hello@amplix.me