General Data Protection Regulation (GDPR) Compliance
Last Updated: October 1, 2025
Braveinve ("we," "us," or "our") is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This policy explains how we collect, use, store, and protect your personal data in accordance with GDPR requirements.
1. Data Controller Information
Braveinve acts as the data controller for personal information collected through our platform.
Contact Information:
- Company Name: Braveinve
- Address: 88 Bright Hill Rd, Singapore 574117
- Email: help@braveinve.xyz
- Phone: +6585558979
2. Legal Basis for Processing Personal Data
We process your personal data based on the following legal grounds:
2.1 Consent
You have given explicit consent for us to process your personal data for specific purposes, such as creating an account, participating in quizzes, or receiving communications.
2.2 Contractual Necessity
Processing is necessary to fulfill our contractual obligations to you, including providing access to our educational platform and services.
2.3 Legitimate Interests
We may process data based on our legitimate business interests, such as improving our services, conducting analytics, and ensuring platform security, provided these interests do not override your rights.
2.4 Legal Obligations
We process data when required to comply with legal obligations, such as tax reporting or responding to lawful requests from authorities.
3. Personal Data We Collect
We collect and process the following categories of personal data:
3.1 Account Information
- Full name
- Email address
- Password (encrypted)
- Profile information
- Account preferences
3.2 Usage Data
- Quiz responses and test results
- Learning progress and performance metrics
- Platform interaction data
- Gamification achievements and scores
- Login history and session information
3.3 Technical Data
- IP address
- Browser type and version
- Device information
- Operating system
- Cookies and similar technologies
3.4 Communication Data
- Messages sent through our platform
- Customer support inquiries
- Feedback and survey responses
4. How We Use Your Personal Data
We use your personal data for the following purposes:
- Providing and managing access to our educational platform
- Delivering interactive quizzes, tests, and assignments
- Tracking learning progress and providing feedback
- Implementing gamification features and rewards
- Personalizing your learning experience
- Communicating with you about your account and our services
- Sending educational content and platform updates
- Improving our platform and developing new features
- Ensuring platform security and preventing fraud
- Complying with legal obligations
- Analyzing usage patterns and conducting research
5. Your Rights Under GDPR
As a data subject, you have the following rights under GDPR:
5.1 Right to Access
You have the right to request access to your personal data and receive a copy of the information we hold about you.
5.2 Right to Rectification
You can request correction of inaccurate or incomplete personal data.
5.3 Right to Erasure (Right to be Forgotten)
You can request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
5.4 Right to Restriction of Processing
You can request that we limit the processing of your personal data in specific situations.
5.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
5.6 Right to Object
You can object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
5.7 Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
5.8 Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
6. Exercising Your Rights
To exercise any of your GDPR rights, please contact us at:
- Email: help@braveinve.xyz
- Phone: +6585558979
We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of any such extension.
To protect your privacy and security, we may need to verify your identity before processing your request.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
7.1 Retention Periods
- Active Accounts: Data is retained while your account remains active and for a reasonable period afterward to allow account reactivation.
- Learning Records: Quiz results and progress data are retained to maintain historical records and enable long-term progress tracking.
- Communication Records: Customer support inquiries and communications are retained for quality assurance and legal purposes.
- Technical Data: Log files and technical data are typically retained for shorter periods necessary for security and operational purposes.
7.2 Deletion
When personal data is no longer needed, we will securely delete or anonymize it in accordance with our data retention schedule and applicable legal requirements.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
8.1 Security Measures
- Encryption of data in transit and at rest
- Secure authentication and access controls
- Regular security assessments and updates
- Employee training on data protection
- Incident response procedures
- Physical security of data storage facilities
8.2 Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.
9. International Data Transfers
Your personal data may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your personal data in accordance with GDPR requirements.
9.1 Transfer Mechanisms
We use the following mechanisms to ensure lawful international data transfers:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions recognizing equivalent data protection standards
- Binding Corporate Rules where applicable
- Other legally approved transfer mechanisms
10. Automated Decision-Making and Profiling
We may use automated processing, including profiling, to personalize your learning experience and provide relevant content recommendations.
10.1 Types of Automated Processing
- Learning path recommendations based on performance
- Adaptive quiz difficulty adjustments
- Personalized content suggestions
- Progress analytics and insights
10.2 Your Rights
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you. You can request human intervention, express your point of view, and contest such decisions.
11. Third-Party Data Sharing
We do not sell your personal data to third parties. We may share your data with the following categories of recipients:
11.1 Service Providers
We share data with trusted service providers who assist us in operating our platform, such as hosting providers, analytics services, and customer support tools. These providers are contractually obligated to protect your data and use it only for specified purposes.
11.2 Legal Requirements
We may disclose your data when required by law, regulation, legal process, or governmental request.
11.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same protections outlined in this policy.
12. Children's Privacy
Our platform is designed for general audiences interested in financial education. We do not knowingly collect personal data from children under the age of 16 without parental consent, as required by GDPR.
If we become aware that we have collected personal data from a child under 16 without proper consent, we will take steps to delete that information promptly.
Parents or guardians who believe their child has provided us with personal data may contact us at help@braveinve.xyz to request deletion.
13. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our platform. For detailed information about our use of cookies, including how to manage your preferences, please refer to our Cookie Policy.
You have the right to accept or reject cookies. Most browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer.
14. Marketing Communications
With your consent, we may send you marketing communications about our services, educational content, and special offers.
14.1 Opt-Out Rights
You can opt out of receiving marketing communications at any time by:
- Clicking the unsubscribe link in any marketing email
- Adjusting your communication preferences in your account settings
- Contacting us at help@braveinve.xyz
Even if you opt out of marketing communications, we may still send you transactional messages related to your account and use of our services.
15. Data Protection Officer
For questions or concerns about our data processing activities and GDPR compliance, you may contact our data protection team at:
Email: help@braveinve.xyz
We are committed to working with you to resolve any privacy concerns promptly and effectively.
16. Updates to This Policy
We may update this GDPR Compliance Policy periodically to reflect changes in our practices, legal requirements, or operational needs. We will notify you of material changes by:
- Posting a notice on our platform
- Sending an email to your registered email address
- Updating the "Last Updated" date at the top of this policy
Your continued use of our services after such modifications constitutes your acknowledgment of the updated policy.
17. Supervisory Authority
If you are located in the European Economic Area, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not complied with applicable data protection laws.
A list of supervisory authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en
18. Contact Us
If you have questions, concerns, or requests regarding this GDPR Compliance Policy or our data processing practices, please contact us:
Braveinve
88 Bright Hill Rd
Singapore 574117
Email: help@braveinve.xyz
Phone: +6585558979
We are committed to protecting your privacy and ensuring compliance with GDPR requirements. Your trust is important to us, and we strive to maintain the highest standards of data protection.