Privacy Policy

1. Information We Collect

Information You Provide Directly:

• Account Registration: First name, last name, age (not date of birth), and email address. We deliberately do not collect date of birth, physical address, or other unnecessary personal information.
• Waitlist Submissions: Email address, background information, interests, and goals as provided in the waitlist form.
• Support Requests: Name, email, reason for contact, and any message content you provide.
• Feature Requests: Feature description, category, and importance rating. Feature requests may be submitted anonymously.
• Purchase Information: Payment information is collected and processed by Stripe. We receive a transaction confirmation and your email address but do not store your full payment card details.
• Communications: When you contact us by email or through our forms, we retain those communications to respond to your inquiry and improve our services.

Information Collected Automatically:

• Usage Data: Pages visited, time spent on pages, links clicked, and other interaction data collected through standard web analytics.
• Device Information: Browser type, operating system, device type, screen resolution, and language settings.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies: We use essential cookies for session management and authentication. We do not use advertising cookies or third-party tracking cookies. See Section 7 for details.

Information from Third Parties:

• Stripe: Transaction confirmation, email address, and billing country associated with purchases.
• SendFox: Subscription status and engagement data for anyone who joins the email list.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform and its features
• Process transactions and send related information (receipts, confirmations)
• Send administrative communications (account updates, security notices, policy changes)
• Send marketing communications about our products and services, where you have consented or where permitted by law (you may opt out at any time)
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve the Platform
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Comply with legal obligations
• Enforce our Terms of Service

We do not sell your personal information to third parties. We do not use your information for advertising targeting or data brokering.

3. How We Share Your Information

We share your information only in the following circumstances:

• Service Providers: We share information with third-party vendors who perform services on our behalf, including payment processing (Stripe), email delivery (SendFox), hosting and serverless functions (Vercel), and workflow automation for form submissions (a self-hosted n8n instance under our control). These vendors are contractually obligated to use your information only to provide services to us and to protect it appropriately.
• Legal Requirements: We may disclose your information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Platform of any change in ownership or uses of your information.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

4. Data Retention

We retain your information for as long as necessary to provide the services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

5. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS 1.3
• Encryption of data at rest in our database
• Row-level security policies that ensure users can only access their own data
• Multi-factor authentication for administrative access
• Regular security reviews and dependency updates

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. AI Features and Data Processing

This Platform does not send anything you type or upload to a third-party AI model. It teaches people how to build with AI; it does not run a user-facing AI feature of its own.

• Course content, exam prep questions, and blog posts are written and reviewed by a person before publication.
• Form submissions, including waitlist answers and exam question reports, are sent to a self-hosted n8n instance that we control. They are not passed to any AI vendor.
• If we add an AI-powered feature in future, we will update this policy and say plainly what is sent, where, and whether it is retained, before the feature goes live.

7. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the Platform to function. These include session cookies for authentication and security tokens. You cannot opt out of essential cookies without disabling the Platform entirely.
• Analytics Cookies: We use privacy-respecting analytics to understand how the Platform is used. These cookies do not track you across other websites and do not identify you personally.

We do not use advertising cookies, third-party tracking cookies, or cookies that build advertising profiles. We do not participate in cross-site tracking.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in or accessing protected features.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information. You can initiate account deletion from your account settings. We will delete your data within 30 days, except as required by law.
• Portability: Request a machine-readable copy of your personal information.
• Opt-Out of Marketing: Unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us at hello@icanteachyouai.com.
• Restriction: Request that we restrict processing of your information in certain circumstances.

To exercise any of these rights, contact us at hello@icanteachyouai.com. We will respond within 30 days. We may need to verify your identity before processing your request.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to correct inaccurate personal information.
• Right to Opt-Out of Sale: We do not sell personal information. You do not need to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond those necessary to provide the services.

To submit a California privacy request, contact us at hello@icanteachyouai.com with the subject line "California Privacy Request."

10. Nevada Privacy Rights

Nevada residents may opt out of the sale of their personal information. We do not sell personal information. Nevada residents may still submit an opt-out request by contacting us at hello@icanteachyouai.com.

11. European Economic Area and UK Users (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR:

Legal Basis for Processing: We process your personal information on the following legal bases: (a) performance of a contract (to provide the services you requested); (b) legitimate interests (to improve our services, prevent fraud, and communicate with you); (c) consent (for marketing communications); and (d) legal obligation (to comply with applicable laws).

Data Transfers: Your information may be transferred to and processed in the United States, which may not provide the same level of data protection as your home country. We use appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority.

To exercise your GDPR rights, contact us at hello@icanteachyouai.com.

12. Children's Privacy

The Platform is not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have collected information from a child under 18, please contact us at hello@icanteachyouai.com.

13. Third-Party Sub-Processors

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, by sending an email to registered users. Your continued use of the Platform after any changes constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: