Privacy Policy

Cybellium is operated by Youguide International BV (“Cybellium”, “we”, “us” or “our”), the data controller responsible for the personal data described in this policy. Our registered office is at MC Square, Leonardo Da Vincilaan 19, 1831 Diegem, Belgium (VAT BE1009005084).

This Privacy Policy explains what personal data we collect when you use the Cybellium platform and website, why we collect it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and Belgian data protection law.

We collect the following categories of personal data:

• Account data — your name, email address and the password you set (stored only in hashed form), or, where you sign in with a third-party provider, the authentication tokens that provider returns. You may optionally add a profile image.
• Technical and session data — your IP address, browser user-agent and session identifiers, which we use to keep you signed in and to protect the account.
• Usage data — records of the products and features you use, such as courses started, assessments taken and reports generated, so we can provide the service and show your progress.
• Content you provide — the questions, prompts and text you submit to our AI features, and any material you upload.
• Enquiries — the information you send us through our contact form, including for sales, support, privacy and legal requests.

We do not collect payment card details on this platform. Where paid plans are arranged, billing is handled separately and this policy will be updated to describe it.

We process your personal data for the following purposes and legal bases:

• To provide the service — creating and managing your account, authenticating you and delivering the products you use. Legal basis: performance of a contract.
• To secure the platform — detecting and preventing fraud, abuse and unauthorised access. Legal basis: our legitimate interests in keeping the service safe.
• To improve our products — understanding how features are used so we can make them better. Legal basis: our legitimate interests.
• To communicate with you — responding to your enquiries and sending service-related messages. Legal basis: performance of a contract and our legitimate interests.
• To meet legal obligations — complying with applicable law and responding to lawful requests. Legal basis: compliance with a legal obligation.

We do not sell your personal data. We share it only with service providers (“processors”) who process it on our behalf, under contract and only on our instructions:

• Neon — managed database hosting, which stores your account and usage data.
• Vercel — application hosting and file storage (Vercel Blob), which serves the platform and stores uploaded files.
• Vercel AI Gateway and its model providers — which process the prompts and content you submit to our AI features in order to generate a response.

We may also disclose personal data where required by law, to enforce our Terms of Service, or in connection with a corporate transaction such as a merger or acquisition.

Some of our providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards recognised under the GDPR — principally the European Commission’s Standard Contractual Clauses — to ensure your data receives an equivalent level of protection.

We keep your personal data for as long as your account is active and for as long afterwards as we need it to meet the purposes described above or to comply with legal, accounting or reporting obligations. When it is no longer needed, we delete it or irreversibly anonymise it. You can ask us to delete your account at any time (see your rights below).

We use strictly necessary cookies to sign you in and keep your session secure. These are required for the platform to function and cannot be switched off through our site. We do not use cookies to build advertising profiles. If we introduce analytics or marketing cookies in future, we will ask for your consent first and update this policy.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to how we process your data;
• receive your data in a portable format;
• withdraw any consent you have given, at any time.

To exercise any of these rights, contact us through our contact form. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbescherming­sautoriteit / Autorité de protection des données) or your local supervisory authority.

If you have any questions about this Privacy Policy or how we handle your data, please reach us through our contact form or write to us at Youguide International BV, MC Square, Leonardo Da Vincilaan 19, 1831 Diegem, Belgium.