Privacy Policy

Effective date: 2026-10-05

Who is the controller
What we collect
Why and the legal basis for each
Processors actually used
Cookies
Retention
Your rights
International transfers
Children
Security
Changes
Contact

1. Who is the controller

The controller of your personal data is [to be completed by the owner], [to be completed by the owner]. For anything in this policy, write to [to be completed by the owner].

2. What we collect

Account: your email address; a password hash if you set a password (never the password itself); short-lived sign-in and confirmation tokens; when you registered and confirmed.
Purchases and membership: what you bought, the amount, the date, the status of your subscription, how many times you downloaded a purchase, and the identifiers Stripe gives us for the customer, payment and subscription. We do not receive or store your card number.
What you do on the site: comments, likes and saved articles; lessons you completed and certificates issued to you; feedback and contact messages you send us.
Usage records: a record each time a page, article or lesson is viewed or completed, with the page concerned and, if you are signed in, your account. We use these to produce totals such as how often an article was read. We do not store your IP address or browser details in these records.
Public counters: article reads, downloads and course learner counts are aggregate numbers and do not identify anyone.
Technical logs: our servers and error-reporting tool process requests, IP addresses and error details for a short time to run and secure the service.
Newsletter and the weekly AI News email: what is sent is the newsletter, if you subscribe. Confirmation is required (double opt-in), and every email has a one-click unsubscribe. We store your email, confirmation and unsubscribe dates.

3. Why and the legal basis for each

To create your account, give you access to what you are entitled to, take payment and deliver purchases — performance of our contract with you.
To keep invoices and payment records and to charge the correct tax — legal obligation.
To keep the service secure, prevent abuse, fix errors and understand in aggregate which content is used — our legitimate interests in running and improving the service.
To send the newsletter — your consent, which you can withdraw at any time with the unsubscribe link in every email.

We do not sell your personal data and we do not use it for advertising.

4. Processors actually used

These companies process personal data for us, each only for the purpose stated:

Stripe — payments, subscriptions and tax calculation. Receives your payment details, email address and billing location directly from you at checkout.
Resend — sending email (sign-in links, receipts, the newsletter). Receives your email address and the content of the email.
Mux — hosting and streaming course video. When you play a video, Mux receives your IP address and device details needed to deliver it.
Sentry — error reporting. Receives technical details of an error, which can include the address of the page and your account identifier.
Our storage provider — stores files, including the files you download. Receives your IP address when you download.
Our hosting provider — runs the servers and the database that hold all of the above.

5. Cookies

We only use strictly necessary session and preference cookies: one that keeps you signed in and protects forms, one that remembers your light or dark theme, and one that remembers that you dismissed the cookie notice. We do not use advertising cookies or third-party tracking cookies.

6. Retention

Account data: for as long as your account exists.
Purchase, subscription and tax records: for as long as tax and accounting law requires, even after you delete your account.
Sign-in and confirmation tokens: until they are used or expire.
Technical logs and error reports: for a short period, then deleted.

7. Your rights

You have the right to access your data, to have it corrected, deleted or restricted, to object to processing based on our legitimate interests, and to receive your data in a portable form.

Access and export: Settings → "Download my data" gives you a file with your profile, purchases, subscriptions, comments, likes, saved articles, course starts, course progress, certificates, newsletter status, serial numbers of your orders and feedback.
Deletion: Settings → "Delete account" cancels any active subscription first, then anonymises the account — your email address and password are removed and you are signed out everywhere — and keeps the financial records the law requires. Account deletion removes the newsletter record and keeps order records as required by law. Comments you posted may remain visible without your email address; write to us if you want them removed too.
Anything else: write to [to be completed by the owner]. We answer within one month.

You also have the right to complain to the data protection authority of the country where you live or work.

8. International transfers

Some of the companies listed above process data outside the country where you live, including in the United States. Where the law requires it, those transfers are covered by an adequacy decision or by standard contractual clauses.

9. Children

The service is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has created an account, tell us and we will delete it.

10. Security

Connections to the site are encrypted. Passwords are stored only as hashes. Paid files and videos are kept in private storage and released through short-lived, signed links after we check that you are entitled to them. No system is perfectly secure; if a breach affects your data we will tell you and the authority as the law requires.

11. Changes

We will update this policy when what we do with data changes. The effective date at the top shows the current version, and we will email you about significant changes.

12. Contact

Questions, requests, or a complaint about how we handle your data: [to be completed by the owner].