Privacy Policy
Last updated: October 24, 2026
1. Who we are
Spirit Wisdom Academy (spiritwisdomacademy.com — "the Academy", "we") is operated by Nikos Kapoutsos, trading as Spirit Wisdom Academy, P.O. Box 76, Naoussa, Paros 84401, Greece. He is the controller of the personal data described in this policy.
Privacy contact: support@spiritwisdomacademy.com. Postal correspondence: Nikos Kapoutsos, Trading as Spirit Wisdom Academy, P.O. Box 76, Naoussa, Paros 84401, Greece.
This policy covers spiritwisdomacademy.com only. Live Zoom courses and private sessions with Nikos Kapoutsos are offered separately through nikothemedium.com, which has its own privacy information.
2. What we collect, why, and on what legal basis
| Information | When | Why | Legal basis (GDPR Art. 6(1)) |
|---|---|---|---|
| Information: Name, email address, password (stored only as a one-way hash), the membership you expressed interest in, and the date and version of the Terms you accepted | When: Creating an account | Why: To create and secure your account and provide the Library, courses and community | Legal basis (GDPR Art. 6(1)): Contract (b) |
| Information: Your marketing choice (yes/no) and when and where you made or changed it | When: At registration, in "Email Preferences" on your dashboard, on the free-introduction form, or via an unsubscribe link | Why: To send Academy news, course announcements and offers only if you have opted in | Legal basis (GDPR Art. 6(1)): Consent (a) — withdrawable at any time |
| Information: Purchase records: Stripe checkout reference, product, amount, currency, status and dates; membership plan, renewal/end dates and Stripe subscription reference; the checkout acknowledgements you gave and when | When: Buying, renewing or canceling | Why: To deliver what you bought, manage recurring billing, keep accounts and evidence your consumer-law choices | Legal basis (GDPR Art. 6(1)): Contract (b); legal obligation (c) |
| Information: Learning records: enrollments, lessons opened and completed, quiz answers and scores, Certificates of Completion (your name, course, certificate number, issue date) and, if you turn it on, a certificate sharing link | When: While you study | Why: To show your progress, award certificates and let you share a certificate if you choose | Legal basis (GDPR Art. 6(1)): Contract (b); consent (a) for sharing |
| Information: Spirit Wisdom Guide conversations (your questions and the answers) | When: Using the AI study companion | Why: To provide the feature and your conversation history | Legal basis (GDPR Art. 6(1)): Contract (b) |
| Information: Forum posts and replies, and course reviews, shown to others with your account name | When: Posting or reviewing | Why: To run the member community and show reviews | Legal basis (GDPR Art. 6(1)): Contract (b) |
| Information: Support requests: name, email, topic, message and your membership plan | When: Using the contact form | Why: To answer you. Your IP address is checked to prevent abuse and is not stored | Legal basis (GDPR Art. 6(1)): Legitimate interest (f) |
| Information: Coaching-session requests (preferred date, status) for sessions included in Yearly or Lifetime membership, and the booking you make in the embedded Calendly scheduler | When: Booking | Why: To schedule your session | Legal basis (GDPR Art. 6(1)): Contract (b) |
| Information: Free-introduction sign-up: name, email, and your separate yes/no to Academy news | When: Requesting the free introduction | Why: To send the free introduction you requested; Academy news only if you ticked the box | Legal basis (GDPR Art. 6(1)): Contract (b); consent (a) |
| Information: Email delivery log: recipient address, subject line, date and delivery status (never the message body) | When: Whenever we email you | Why: To send each one-time email once and investigate delivery problems | Legal basis (GDPR Art. 6(1)): Legitimate interest (f) |
We never see or store your card number: payment details are entered on Stripe's secure checkout page. We make no automated decisions with legal or similarly significant effects about you, and we do not sell personal data.
3. Who processes your data for us
- Stripe — payment processing and subscription billing. Stripe receives your email address and payment details under its own privacy policy.
- Brevo — sends our account, purchase, course and (with consent) marketing emails; holds your email address, name and your subscription or unsubscribe status.
- Emergent — hosts the website, application, database and the downloadable lesson resources. The hosting platform also loads a small diagnostic script on each page; as read by us, it records errors within your own browser session for the platform's development tools and does not send data to any third party.
- OpenAI (accessed through our hosting platform) — generates Spirit Wisdom Guide answers from the text of your questions.
- YouTube — course videos are embedded from YouTube, which may set cookies when you play a video. If we host videos on our own storage or use another video service in future, we will update this policy.
- Google Fonts — our typefaces load from Google's servers, which receive your IP address.
- Calendly — the scheduler embedded on our coaching page; what you enter there is also subject to Calendly's privacy policy.
- Zoom is used only for live courses sold separately through nikothemedium.com.
Some of these providers are based in, or process data in, the United States and other countries outside the European Economic Area. Each provider publishes its own data-transfer terms. We are reviewing the transfer safeguards of each provider and will update this policy.
We do not use PostHog or any other analytics or session-replay tool (PostHog was removed in October 2026).
4. Cookies and browser storage
- Essential: a sign-in token kept in your browser's local storage so you stay logged in. Stripe sets cookies on its own checkout pages for fraud prevention.
- Embedded services: YouTube may set cookies when you play an embedded video; Calendly may set cookies when you use the embedded scheduler.
The Academy itself sets no analytics or advertising cookies. If that changes, we will ask for your consent first where the law requires it and update this policy.
5. How long we keep information
- Account and learning records (profile, enrollments and progress, quiz attempts, certificates, Guide conversations, coaching and booking requests, support requests) — while your account exists; deleted when your account is deleted (§7).
- Purchase and accounting records — for as long as Greek tax and accounting law requires (generally at least five years from the end of the relevant tax year, and longer where a tax audit or dispute is open), after which they are deleted or anonymized.
- Email delivery log — the email address is replaced by an irreversible code when your account is deleted; the remaining entry (subject, date, status) is kept to prevent duplicate sends.
- Marketing opt-out records — kept so that we do not email you again by mistake.
- Support requests from people without an account — deleted on request.
- Links we email you — password-reset links expire after 1 hour; account set-up links after 48 hours.
6. Who can see your information
Other members see your account name on forum posts, replies and course reviews. A certificate is visible to the public only if you turn on sharing; the public page shows your name, course, issue date and certificate number and nothing else, and you can turn sharing off at any time (the old link stops working). Academy administrators can see account, purchase and progress records in order to support you.
7. Your rights
Under the GDPR and Greek Law 4624/2019, you may ask to access, correct, delete or receive a copy of your personal data, to restrict or object to processing, and to withdraw consent at any time.
- Marketing emails: use the unsubscribe link in any marketing email (no login needed) or the "Email Preferences" control on your dashboard.
- Everything else: email support@spiritwisdomacademy.com from the address on your account. We respond within one month, as the law requires.
- Account deletion is carried out by us on your request. We delete your profile, enrollments and lesson progress, quiz attempts, certificates, Spirit Wisdom Guide conversations, coaching and booking requests and support requests. Your forum posts, replies and course reviews are kept but anonymized (your name is replaced by "Former member"), unless you ask us to remove them, in which case we delete them. Purchase and accounting records are kept only for the period the law requires (§5), and the email-delivery log is anonymized as described in §5. We also delete your contact record at our email provider or, if you had unsubscribed, keep only the suppression entry so you are never emailed again.
- You may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) or with the supervisory authority of the country where you live.
8. Age
The Academy is for adults. You must be at least 18 years old to create an account or make a purchase. We do not knowingly collect information from anyone under 18; if you believe we have, email us and we will delete it.
9. Security
Passwords are stored as one-way hashes, access is protected by signed tokens, and payments are handled entirely by Stripe. No online service can be guaranteed completely secure; please use a strong, unique password.
10. Changes to this policy
We will publish any change on this page with a new "last updated" date. Where a change materially affects how we use your data, we will also tell account holders by email before it takes effect.
Questions? Contact & Support · Privacy Policy · Terms of Use · Refund & Cancellation