Skip to content
Zero2Code

Support

Privacy Policy

Last updated:

This Privacy Policy explains what personal data Zero2Code (VÖEN: 2010015322, “we”) collects when you use the website zero2code.com, the web classroom and the Telegram bot, why we use it, who we share it with and what rights you have. We collect only the data the course needs to work.

1. What we collect

  • Account: your name, email address and password. We store the password only as a hash (with the scrypt algorithm), never in readable form.
  • Telegram: if you connect Telegram or sign in with it, your Telegram ID, your name, Telegram's language setting and the messages you send to the bot.
  • Google: if you sign in with Google, your Google account ID and email address.
  • Settings and first questions: the language you chose and your answers to the first questions (your goal and the device you study on).
  • Learning: your progress (current day, passed lessons, scores, streak, badges and certificates), your answers and code, Professor Dash's feedback, your chat with Professor Dash (including photos you send him in Telegram), the hints you used and your “Teach it back” explanations.
  • Payments: the package you chose, the price, the promo codes you used, your paid access period and the records of payment confirmations. We do not collect or store bank card details on our website.
  • WhatsApp: when you write to us on WhatsApp to pay, we see your phone number, your WhatsApp name and your messages (the ready message contains the package, the price, your name and your Student ID).
  • Visit statistics: which public pages are opened and which steps are taken (for example, starting to sign up or pressing a payment button), the language and the name of the website that sent you. These statistics use no cookies: a visitor is counted with a hash of the IP address, the browser and the date; this identifier changes every day and cannot be turned back into the IP address.
  • Security data: to protect sign-in and Professor Dash from abuse, we count requests per IP address and per email. In these counters IP addresses and emails are stored only as hashes, and they are deleted after a short time.
  • Technical logs: our servers record technical events (for example, errors and sign-ins); emails are masked, and message texts, passwords and tokens are never written to the logs.

2. Why we use it

  • to create and run your account and let you sign in with email, Google or Telegram;
  • to provide the course: open lessons, save your progress, show your dashboard and certificates;
  • to check and grade your answers and to answer you in the chat (Professor Dash);
  • to handle payments: confirm a payment, unlock your access, apply promo codes, remind you before your access ends;
  • to send service messages: password reset emails and, if you connected Telegram, lesson messages and reminders;
  • to protect the Service: limits against spam and abuse, protection of sign-in, prevention of fraud;
  • to improve the course: to understand where students get stuck and which lessons need work.

By creating an account you consent to the processing of your personal data as described in this Policy. We do not sell your personal data and do not use it for advertising.

3. Who we share it with

We use trusted providers to run the Service. They process data only as far as their service needs:

  • OpenAI – the AI behind Professor Dash: your answers, code, messages, photos and the context needed (for example, your name and the task) are sent to check them and to write replies;
  • Neon – the database where accounts and progress are stored;
  • Modal – hosting of the Telegram bot, Professor Dash and part of the website;
  • Hostinger – hosting of the website zero2code.com;
  • Resend – sending emails (password resets);
  • Telegram – when you use the bot or sign in with Telegram; the dashboard and classroom pages load Telegram's Mini App script;
  • Google – when you sign in with Google; the website loads its fonts from Google Fonts, and Dart tasks open the DartPad editor;
  • jsDelivr – delivers the code editor and the Python runtime that run in your browser in the classroom;
  • MilliNet (millinet.az) – the public pages of the website (not the sign-in pages or your account) load the banner and visit counter of this Azerbaijani site catalog; MilliNet may count the visit and see your IP address and browser details;
  • WhatsApp (Meta) – for payment conversations when you press a payment button or write to us.

These providers may process data outside Azerbaijan, in other countries.

The course teacher sees your progress, answers and payment status on the teacher board, to help you and to confirm payments. We may disclose data when the law requires it (for example, at the request of a competent state authority).

4. Cookies

We use only the cookies the website needs to work:

  • fa_session – keeps you signed in (up to 30 days);
  • fa_csrf – protects forms against forged requests;
  • fa_lang – remembers the language you chose;
  • fa_gstate – only during Google sign-in, for 10 minutes.

We use no advertising or tracking cookies and no third-party analytics. The classroom also keeps small notes in your browser (for example, which steps of today's lesson you have done, or a promo code for the current session); they stay on your device.

5. How long we keep data

  • Account data, progress, answers and chat: as long as your account exists.
  • To delete your account, write to support@zero2code.com from your account's email (or give your Student ID). We delete or anonymise your data within a reasonable time, normally within 30 days, except data we must keep by law (for example, payment records).
  • Security counters: from a few minutes to one day; records of reached limits: up to 60 days.
  • Password reset links are valid for 1 hour, Telegram connection links for 30 minutes.
  • Visit statistics are kept without names; the steps of signed-in students (for example, signing up or pressing a payment button) are deleted together with the account.
  • Server logs are kept for a short time by our hosting providers.

6. Your rights

You have the right to:

  • access: find out what data we keep about you and get a copy;
  • correction: fix wrong or outdated data (you can change the language yourself at any time);
  • deletion: ask us to delete your account and data;
  • objection: object to the processing of your data for certain purposes and withdraw your consent.

To use these rights, write to support@zero2code.com. We answer within a reasonable time. You can also turn to the competent state authority of the Republic of Azerbaijan.

7. Children

The Service is for people aged 16 and over. Younger people may use it only with the consent of a parent or legal guardian. If you think a child has given us data without consent, write to us and we will delete it.

8. Security

  • passwords are hashed with the scrypt algorithm;
  • all connections are encrypted with HTTPS;
  • session cookies are signed and stop working when you log out or change your password;
  • forms are protected against forged requests (CSRF);
  • limits protect against password guessing and abuse;
  • only the services that need it have access to the database.

No system is completely secure. If we learn of a security incident that affects your data, we will inform you.

9. Changes to this Policy

We may update this Policy. The date of the latest version is shown at the top of this page. We will announce important changes on the website or in Telegram before they take effect.

10. Contact

Questions about personal data: Zero2Code, VÖEN: 2010015322, support@zero2code.com.