Privacy Policy

The short version

• We collect what we need to run your program: your account, your profile, your bookings, your weekly tracks, your onboarding and survey answers, and your payment plan.
• We don't sell your data, we don't show ads, and the Student Hub has no advertising or analytics trackers.
• We use a few trusted services to run the hub (Wix, Stripe, SignWell, YouTube), each only for its own job.
• Other students can see your name, your leaderboard standing and the profile you choose to fill in. Your answers, bookings and payments are only seen by you and the PascFrenk team.
• You can see, correct, download or delete your data at any time. Write to academy@pascfrenk.com.

1. Who we are

The PascFrenk Academy Student Hub (the "hub") is run by PASCFRENK SL, a company registered in Spain with tax ID B93981983 ("PascFrenk", "we", "us"). We are the data controller for the personal data described here.

For anything about your data, contact us at academy@pascfrenk.com. We answer within one month, usually much sooner.

This policy covers the Student Hub, the Weekly Track form and leaderboard, and the sign-in pages. Our sales calls, website and marketing on pascfrenk.com have their own privacy notice.

2. What we collect

Your account. Your email address, a password (stored only as a salted, one-way hash: we can never see it), when you joined, and when you last signed in.

Your profile. First and last name, artist name, a short bio, a profile photo, and links you choose to add (Discord, Instagram, Spotify, Apple Music, YouTube, SoundCloud, Beatport). All optional except your name.

Your preferences. Program language (English, Italian or Spanish), time zone, colour theme, and whether holiday decorations are on.

Your program.

• 1-1 calls, your Onboarding Call and community calls: the times, the coach, and whether they were booked, moved, cancelled or attended.
• Your answers to the questions before a 1-1 (what you want to work on, links to your tracks, what you've tried, what's going wrong).
• Your onboarding document answers (your vision, goals and where your music is at).
• Your survey answers at 25 days, 3 months, 4.5 months and 6 months.
• Weekly Track submissions: the link to your track, a reference track, the hours you spent, what you learned, where you got stuck and what you'll focus on next, plus skip tokens used.
• Notes and progress assessments your coaches write about you (for example your skill levels and what you're focusing on).
• A log of what you did in the hub (booked, rescheduled, cancelled, submitted, completed onboarding).

Your contract. Whether your program agreement has been sent and signed, and a link to your signed copy. The contract itself lives with SignWell (see section 5).

Your payments. Your payment plan: each instalment's amount, currency, due date, whether it's paid, and the link to pay it. We never see or store your card details: payments are made on Stripe's own pages. We email you a reminder a few days before each instalment is due, and a receipt when you pay.

Security data. To stop people guessing passwords, we briefly keep failed sign-in attempts by IP address and by account, in memory only (it's gone within minutes and never written to a database). Our hosting provider keeps standard server logs (IP address, browser, pages requested) for security.

2b. Sales page visitors and Intro Call bookings

How you use the page. While you're on it we record, against a random id for that browser tab: how long you stay, how much of the video you watch, how far you scroll, how far you get in booking, the page that sent you, any campaign tags in the link, and Meta's ad-click id if you came from one of our ads. We use it to improve the page and our ads. We don't record what you type until you choose to continue (below).

Booking an Intro Call. Once you give your name, email and phone and press Next (the notice above that button says so), we save them and your answers as you go, even if you don't finish booking, so we can follow up about your Intro Call by phone, text or email. You can ask us to stop at any time by replying STOP to a text, telling us on a call, or emailing academy@pascfrenk.com.

3. Why we use it, and our legal basis

Under the GDPR we need a legal basis for each use. Ours are:

• To deliver your program (contract): your account, bookings, pre-call answers, onboarding, tracks, coaching notes, leaderboard and payment plan. Without these we can't coach you.
• To improve the program (legitimate interest): your survey answers and how the hub is used, so we can make the course and coaching better. You can object at any time.
• To keep the hub secure (legitimate interest): sign-in protection, security logs and preventing abuse.
• To meet legal duties (legal obligation): keeping invoices and payment records as Spanish tax and commercial law requires.
• Optional extras (consent): your profile photo, bio and links. You can remove them whenever you like in Settings.

We don't use your data for automated decisions that have legal or similarly significant effects on you, and we don't use it to train AI models.

4. Who can see what

• The PascFrenk team (your coaches and the people who run the academy) can see everything in your account, to coach you and run the program. Everyone on the team is bound to keep it confidential.
• Other students see your name, your place, points and streak on the leaderboard, and the profile you fill in (photo, artist name, bio and links). They never see your answers, bookings, payments, coaching notes or anyone's track links but their own.
• Anyone with the leaderboard link can see the public Weekly Track leaderboard (names, places, points and streaks; no track links, no emails).

5. The services we use

We share data only with services that help us run the hub. Each acts on our instructions under a data processing agreement and may only use your data for that purpose:

• Wix.com: hosts the hub, stores its data and your profile photo, and runs our bookings and booking emails.
• Stripe: takes your payments on its secure pages. Stripe is also an independent controller for fraud prevention and its legal duties.
• SignWell: sends your program agreement and stores the signed copy.
• YouTube (Google): plays the course videos. Videos use YouTube's privacy-enhanced mode and nothing loads from YouTube until you press play. After that, YouTube's own privacy policy applies.
• Discord and Google Docs are linked from the hub. When you open them you're using their services under their own terms and privacy policies.

Some of these companies process data outside the European Economic Area (for example in the United States or Israel). When they do, the transfer is covered by an EU adequacy decision (such as the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.

We never sell or rent your personal data, and we don't share it with advertisers. We'd only disclose it to authorities if the law requires us to.

6. Cookies

The hub uses only strictly necessary cookies, so we don't ask for cookie consent:

• A sign-in cookie that keeps you signed in. It's secure, can't be read by scripts, and works only on this site.
• Technical cookies our hosting provider may set for security and to keep the site running.

Your browser may also remember small settings on your device (like which tab you had open). There are no advertising, analytics or tracking cookies.

7. How long we keep it

• Your account, profile, bookings, answers, tracks and coaching notes: while your program runs, and for up to 2 years after it ends, so you keep access as an alumnus and we can coach you again if you come back. Ask us to delete it sooner and we will.
• Invoices and payment records: 6 years, as Spanish commercial and tax law requires (Article 30 of the Commercial Code and tax rules).
• Your signed contract: for as long as claims about it could be made (generally 5 years after the program ends under Spanish law).
• Failed sign-in attempts: minutes, in memory only. Server security logs: up to 90 days.

After that we delete your data or make it fully anonymous (for example, numbers like how many tracks were submitted in a month).

8. Your rights

You have the right to:

• access your data and get a copy of it
• correct anything that's wrong (most of it you can change yourself in Settings)
• delete your data, unless we must keep it by law
• restrict or object to how we use it, including our legitimate-interest uses
• take your data with you in a common, machine-readable format
• withdraw consent for anything based on consent, at any time

To use any of these, write to academy@pascfrenk.com from the email on your account (so we know it's you). It's free and we answer within one month.

If you're unhappy with how we handle your data, please tell us first so we can fix it. You also have the right to complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, or to the authority where you live.

9. How we protect it

We protect your data with encryption in transit (HTTPS everywhere), passwords stored only as salted hashes, secure sign-in cookies, limits on sign-in attempts, strict browser security rules, private storage for photos, and access limited to the team members who need it.

No system is perfectly secure. If a breach ever puts your data at risk, we'll tell you and the authorities as the law requires, and say what we're doing about it.

10. Age

The hub is for students enrolled in PascFrenk Academy, who must be at least 18 (or have their parent's or guardian's consent if they are 16 or 17). We don't knowingly collect data from children under 16.

11. Changes to this policy

If we change how we use your data, we'll update this page and the date at the top. If the change is significant, we'll tell you in the hub or by email before it takes effect.