Privacy Policy.

RSA collects information you provide for inquiries, placement, trial classes, enrollment and student services: name, contact details, relevant level and availability, learning records, attendance, membership requests and communications. Billing records can include transaction identifiers, amounts, status, billing address and limited card details supplied by the processor. Payment fields are handled by the payment provider; do not email full card numbers or security codes.

We use information to respond to you, recommend and deliver classes, administer membership and payments, send service notices, support academic progress, prevent misuse and maintain required records. Optional marketing and optional media permissions are separate from essential enrollment communications. You may ask to stop promotional messages without canceling necessary class or billing notices.

Information is shared only as needed with authorized staff and providers supporting the service, such as Base44 hosting and application services, Stripe or Square payments, and Google services used for email, Calendar and Classroom. Providers receive information relevant to their task and may process it under their own terms. We do not sell student personal information. We may disclose information when legally required or reasonably necessary to protect safety or address fraud.

When you submit payment information, the processor handles it under its own privacy notice. See Stripe Privacy Policy. Square and Google notices are available through the service you use. External sites and group communications have their own privacy settings; joining a group may reveal your contact information to other participants. Ask RSA for an alternative communication channel if needed.

The website and student services may use cookies, browser storage, access tokens and technical logs for sign-in, preserving a session, preferences, security and reliable operation. Clearing storage can require a fresh personal access link. Do not share that link. Any optional analytics or advertising technology requires a separate disclosure and choices appropriate to its use; this notice is not permission to install undisclosed trackers. We use session storage for enrollment progress and personal portal links; it normally lasts for the browser tab, and server access may expire sooner. Saved placement progress and contact details in Pulse are kept locally for up to seven days per attempt, without extending that period on each save. Existing saved attempts receive a seven-day migration period. After local expiry, use your email to recover an existing completed result; you do not need to repeat a completed test. Local expiry is checked when the saved record is accessed; closing or clearing your browser may remove it sooner. This does not delete records held by RSA. Optional Google Maps and YouTube embeds are blocked until you load an individual item or allow automatic loading in Privacy settings. Loading them sends technical information to Google, which may use storage under its own policies. YouTube uses its privacy-enhanced embed domain. You can withdraw automatic permission in Privacy settings; this unloads embedded content but cannot undo information already sent or clear cookies held on another provider's domain. Your versioned external-content preference is stored locally for up to 180 days. Essential hosting, security and payment resources include Base44, Cloudflare Turnstile, Stripe and the unpkg content-delivery network for application libraries. These providers may receive technical information needed for their services. We have not added Google Analytics, Meta Pixel, Hotjar or Clarity integrations to the reviewed application code. Administrative CMS drafts and history are stored on the administrator's device until cleared. For privacy requests or help using a shared device, contact info.admin@realspanishacademy.com.

RSA limits access according to staff responsibilities and uses reasonable safeguards. No online system is guaranteed to be completely secure. Records are retained as needed for education, membership administration, accounting, disputes and legal obligations, then deleted or de-identified when no longer needed. A deletion request may not remove records that must be retained, but unrelated uses should cease where applicable.

Contact info.admin@realspanishacademy.com to request access, correction, deletion, a copy of your information, or withdrawal of optional permission. RSA may verify identity before releasing or changing records and will explain applicable retention limits. A parent or guardian must arrange services and permissions for a minor. If child information was submitted without appropriate authorization, contact RSA so it can be reviewed.

Real Spanish Academy LLC · 711 E 65th St, Indianapolis, IN 46220 · (317) 671-6063 · info.admin@realspanishacademy.com. Privacy notice updated October 22, 2026. Material changes will be communicated as appropriate. Rights available under applicable law are not limited by this notice.