Privacy Policy

Last Updated: January 13, 2026

1. Introduction

AI Analyst Academy ("Company", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational platform and services.

By using AI Analyst Academy, you consent to the data practices described in this policy.

2. Information We Collect

2.1. Account Information

When you create an account, we collect:

  • Email address: Used for authentication, account recovery, and essential communications
  • Password: Stored securely using industry-standard hashing (we never store plaintext passwords)
  • Display name: Optional, derived from your email if not provided

2.2. Learning Progress Data

To provide a personalized learning experience, we track:

  • Module progress: Which sections you've viewed and completed
  • Lab submissions: Your progress through hands-on exercises
  • Review queue: Spaced repetition data for concept retention
  • Streak data: Daily learning activity for motivation features
  • Time spent: Aggregate time data to improve content

2.3. User Preferences

We store your preferences including:

  • Selected learning persona/path
  • Daily learning goal settings
  • Theme preferences (light/dark mode)

2.4. API Keys (BYOK - Bring Your Own Key)

If you choose to use the AI Sandbox feature, you may optionally store your own API keys from providers like OpenAI, Anthropic, or Google. These keys are:

  • Encrypted at rest using industry-standard encryption
  • Never logged or stored in plaintext
  • Used only to make API calls on your behalf within the Sandbox
  • Deletable at any time through your account settings

2.5. Sandbox Inputs

Prompts and content you enter into the AI Sandbox may be temporarily processed to provide the service. We do not permanently store Sandbox session data beyond what is necessary for the immediate interaction. You should not enter sensitive personal information, confidential business data, or secrets into the Sandbox.

2.6. Portfolio and Deliverables

If you submit Capstone Projects or Phase Deliverables, we store this content to:

  • Display your progress and achievements
  • Potentially feature your work (with your permission) for educational purposes

2.7. Automatically Collected Information

Like most websites, we automatically collect:

  • Log data: IP address, browser type, pages visited, time and date of visits
  • Device information: Operating system, screen resolution
  • Cookies: Session cookies for authentication (see Section 5)

3. How We Use Your Information

We use the collected information to:

  • Provide the Service: Authenticate you, save your progress, and deliver personalized learning
  • Improve the Platform: Analyze usage patterns to enhance curriculum and user experience
  • Communicate: Send essential account-related emails (password resets, security alerts)
  • Maintain Security: Detect and prevent fraud, abuse, or violations of our Terms

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

4. Data Sharing and Third Parties

4.1. Service Providers

We use the following third-party services to operate AI Analyst Academy:

  • Supabase: Database and authentication infrastructure (data stored securely in the cloud)
  • Vercel: Website hosting and deployment
  • AI Providers (via BYOK): When you use the Sandbox with your own API keys, your prompts are sent to the respective AI provider (OpenAI, Anthropic, Google) under their privacy policies

4.2. Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights and safety.

4.3. Business Transfers

If AI Analyst Academy is acquired or merged, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Cookies and Tracking

We use cookies for:

  • Authentication: Session cookies to keep you logged in
  • Preferences: Storing your theme choice (light/dark mode)

We do not use third-party tracking cookies, advertising pixels, or analytics that track you across other websites.

You can disable cookies in your browser settings, but this may affect your ability to use the platform.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • HTTPS encryption for all data in transit
  • Encrypted storage for sensitive data (API keys, passwords)
  • Row-level security policies in our database
  • Regular security reviews of our codebase

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your data as follows:

  • Account data: Retained while your account is active
  • Progress data: Retained while your account is active to preserve your learning history
  • Sandbox sessions: Not permanently retained; processed transiently
  • Deleted accounts: Data is permanently deleted within 30 days of account deletion request

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate data
  • Deletion: Request deletion of your account and associated data
  • Portability: Receive your data in a portable format
  • Objection: Object to certain processing of your data

How to Exercise Your Rights

To request access to, correction of, or deletion of your personal data, please email us at privacy@aianalyst.academy with the subject line "Data Request."

Please include:

  • Your name and email address associated with your account
  • A description of what you are requesting
  • Any relevant details to help us locate your data

We will respond to your request within 30 days. We may need to verify your identity before processing certain requests.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
  • Right to Delete: You can request deletion of your personal information
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

We do not sell personal information. AI Analyst Academy does not sell, rent, or trade your personal information to third parties for monetary consideration.

10. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time

Legal Basis for Processing

Our legal basis for processing your data is:

  • Consent: When you create an account and agree to this Privacy Policy
  • Contract Performance: To provide the Services you requested (curriculum access, progress tracking)
  • Legitimate Interests: To improve our Services, ensure security, and communicate with you about your account

11. Children's Privacy

AI Analyst Academy is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us immediately at privacy@aianalyst.academy.

If you are between 16 and 18 years old, you may use the Services with permission from a parent or guardian.

12. International Data Transfers

AI Analyst Academy is based in the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

These countries may have different data protection laws than your country of residence. By using our Services, you consent to the transfer of your information to these countries.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on this page with a new "Last Updated" date
  • Sending an email notification to account holders for significant changes

Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: