Enigma

Privacy notice

Effective date: August 27, 2026Last updated: August 28, 2026Version 1.0

Enigma University, operated by Enigmakey (“we,” “our,” or “us”), respects your privacy. This Privacy Notice outlines how we collect, process, and protect data across our educational platform (enigmakey.io), member portals, and learning modules.

01 // Information we collect

We limit data collection strictly to what is required to manage member accounts, enforce tier routing, and track learning progress:

  • Account Credentials: First name, last name, company name, job title, work email address, and authentication session tokens.
  • Learning & Watch Telemetry: Video completion markers, timestamp progress (used to support playback resumption and 90% auto-completion rules), module completion dates, and interactive transcript search events.
  • Certificate Data: Metadata generated for dynamic PDF certificates (member name, module title, completion date, and unique certificate identifier).
  • Asset Analytics: Logs of downloadable PDF reference resources associated with your profile.

Note: We do not collect, track, process, or sell third-party browser profiling data, cross-site tracking telemetry, or advertising identifiers.

02 // How we use your data

Your personal data is processed exclusively for functional educational operations:

  • Authentication & Tier Routing: Authenticating user sessions and automatically routing accounts to their assigned tier (Insight, Mastery, or Sovereign).
  • Content Streaming: Delivering encrypted video streams through our private cloud infrastructure and content delivery network.
  • Progress Tracking: Updating personal learning dashboards, tracking video completion state, and calculating overall curriculum progress.
  • Credential Verification: Issuing and storing verifiable PDF certificates of completion within the Certifications Hub.
  • Enterprise Reporting: Providing aggregated workforce completion metrics for organization-sponsored or Sovereign partner accounts.

03 // Data infrastructure & third-party processors

We do not share data with third parties for marketing purposes. To execute platform services, data is processed across functional enterprise infrastructure:

  • Identity & Access Management Providers: Manages user authentication, session security, and credential verification.
  • Managed Database Infrastructure: Stores member progress records, watch history timestamps, tier permission flags, and metadata in encrypted cloud database clusters.
  • Cloud Storage & Content Delivery Networks (CDNs): Hosts and streams encrypted video files and downloadable PDF assets via secured, short-lived media URLs.

04 // Account integrity & email policy

To preserve enterprise tier permissions and partner access governance, primary work email addresses are locked upon account registration. Name and password updates can be made directly within your profile settings. Email modification requests require manual verification via [email protected].

05 // Individual rights & data retention

Depending on your jurisdiction, you have the right to access, export, or request deletion of your personal data. You may request a CSV export of your learning activity or demand full account erasure by contacting [email protected]. Progress and certificate metadata are retained only for as long as your account remains active or as required for dynamic certificate verification.