Introduction
AITRAIN Academy ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our learning platform and services.
Your privacy matters. We only collect data necessary to provide you with an exceptional learning experience and never sell your personal information to third parties.
Information We Collect
Information You Provide
- Account Information: Name, email address, password, and profile details when you create an account
- Payment Information: Billing address and payment method details (processed securely through Stripe)
- Learning Data: Course progress, quiz answers, assignments, and AI tutor conversations
- Communications: Messages you send through discussions, study groups, or support channels
- Profile Content: Profile photos, bio, and other optional information you choose to share
Information Collected Automatically
- Usage Data: Pages visited, features used, time spent learning, and interaction patterns
- Device Information: Browser type, operating system, device type, and screen resolution
- Log Data: IP address, access times, and referring URLs
- Cookies: Session cookies, preference cookies, and analytics cookies (see Cookie Policy below)
How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide learning services | Account, learning data | Contract performance |
| Process payments | Payment information | Contract performance |
| Personalize learning experience | Usage data, preferences | Legitimate interest |
| AI tutor interactions | Conversations, context | Contract performance |
| Improve our platform | Analytics, feedback | Legitimate interest |
| Send notifications | Email, preferences | Consent / Legitimate interest |
| Security and fraud prevention | Log data, device info | Legitimate interest |
Cookie Usage
We use cookies and similar tracking technologies to enhance your experience on our platform.
Essential Cookies
Required for the platform to function properly. These cannot be disabled and include:
- Authentication and session management
- Security tokens and CSRF protection
- Load balancing and server routing
Functional Cookies
Remember your preferences and settings:
- Theme preferences (dark/light mode)
- Language settings
- Video playback preferences
Analytics Cookies
Help us understand how users interact with our platform:
- Page views and navigation patterns
- Feature usage statistics
- Performance monitoring
You can manage cookie preferences using the cookie consent banner or by adjusting your browser settings. Note that disabling certain cookies may affect platform functionality.
Data Sharing and Disclosure
We do not sell your personal information. We may share data with:
- Service Providers: Third-party services that help us operate (hosting, payment processing, analytics)
- AI Partners: AI model providers for tutor functionality (data is anonymized where possible)
- Team Administrators: If you're part of an organization's team, administrators may see your progress
- Legal Requirements: When required by law or to protect our rights and safety
Third-Party Services We Use
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database and authentication | Account and learning data |
| Stripe | Payment processing | Payment information |
| Anthropic / OpenAI | AI tutor functionality | Conversation context |
| Vercel | Platform hosting | Log and usage data |
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Access Your Data
Request a copy of all personal data we hold about you. You can export most of your data directly from the Settings page.
Correct Your Data
Update or correct inaccurate information through your profile settings or by contacting us.
Delete Your Data
Request deletion of your account and associated data. Some data may be retained for legal or legitimate business purposes.
Export Your Data
Download your learning progress, certificates, and profile data in a portable format from Settings > Data Export.
Restrict Processing
Request that we limit how we use your data in certain circumstances.
Object to Processing
Object to processing based on legitimate interests, including marketing communications.
Withdraw Consent
Where processing is based on consent, you can withdraw it at any time without affecting prior processing.
To exercise any of these rights, visit Settings > Privacy or contact us at privacy@aitrain.io. We will respond within 30 days.
Data Security
We implement industry-standard security measures to protect your information:
- Encryption: All data transmitted over HTTPS with TLS 1.3 encryption
- Password Security: Passwords are hashed using bcrypt with salting
- Access Controls: Role-based access and principle of least privilege
- Infrastructure: SOC 2 compliant hosting with regular security audits
- Monitoring: 24/7 security monitoring and incident response
Data Retention
We retain your data for as long as necessary to provide our services:
- Account Data: Retained while your account is active and for 30 days after deletion request
- Learning Progress: Retained to provide certificates and transcripts
- Payment Records: Retained for 7 years for tax and legal compliance
- Support Communications: Retained for 2 years for quality assurance
- Analytics Data: Aggregated and anonymized after 12 months
International Data Transfers
Your information may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Data Processing Agreements with all service providers
- Compliance with applicable data protection laws
Children's Privacy
AITRAIN is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by:
- Posting the updated policy with a new "Last Updated" date
- Sending an email notification for significant changes
- Displaying a notice in the platform
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Privacy Inquiries
Email: privacy@aitrain.io
Data Protection Officer: dpo@aitrain.io
Address: AITRAIN Academy, 123 Innovation Drive, San Francisco, CA 94105, USA
For EU/EEA Residents
You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data in accordance with applicable law.