Privacy Policy

1. Who we are

Productive AI Lab (“we”, “us”, “our”) provides an online learning platform. This policy applies to our website and learning application. For any privacy question, contact us at [email protected].

2. Data we collect

We only collect what we need to run the platform:

• Account data — your name and email address, handled by our authentication provider (Clerk). If you sign in with Google, we receive your basic profile and email from Google.
• Learning data — your course progress, completed lessons, saved prompts, notes, onboarding answers and streaks, stored in our database (Supabase).
• Purchase data — records of courses or subscriptions you buy. Card details are handled entirely by our payment processor (Stripe); we never see or store your full card number.
• Communication data — notifications and transactional emails we send you (via Resend), such as welcome, purchase and course-completion messages.
• Technical data — limited information such as your IP address and browser type, used for security and to keep the service reliable.

3. How we use your data

• To create and secure your account and provide the courses and features you access.
• To save your progress so you can pick up where you left off.
• To process payments and give you access to what you’ve purchased.
• To send you service messages (e.g. receipts, course updates, notifications).
• To protect the platform against fraud, abuse and technical faults.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Legal bases

Where data-protection law (such as the UK GDPR / EU GDPR) applies, we process your data on the basis of performing our contract with you (providing the service), our legitimate interests (keeping the platform secure and improving it), your consent (optional cookies and marketing, where applicable), and compliance with legal obligations (e.g. tax records for purchases).

5. Service providers (processors)

We share data only with the providers that help us run the platform:

• Clerk — authentication and account management.
• Supabase — database and file storage for your learning data.
• Stripe — payment processing (see Stripe’s own privacy policy for card handling).
• Resend — delivery of transactional emails.

Each processes data on our behalf under their own security and privacy commitments.

6. Cookies

We use a small number of cookies and similar technologies. Strictly-necessary cookies (for sign-in and your theme preference) are always on; optional cookies are only set with your consent. See our Cookie Policy for the full list and how to change your choice.

7. Data retention

We keep your account and learning data for as long as your account is active. Purchase records are kept as long as needed for legal and accounting purposes. If you delete your account, we remove or anonymise your personal data except where we must retain it by law.

8. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data (“right to be forgotten”);
• object to or restrict certain processing;
• receive a copy of your data in a portable format; and
• withdraw consent at any time where processing is based on consent.

To exercise any of these, email [email protected]. You also have the right to complain to your local data-protection authority.

9. Security

We protect your data with encryption in transit (HTTPS), strict server-side access controls, database row-level security, and secrets that are never exposed to your browser. No system is perfectly secure, but we take reasonable measures to keep your data safe.

10. Children

The platform is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will remove it.

11. Changes to this policy

We may update this policy from time to time. We’ll change the “last updated” date above and, for material changes, provide a clearer notice.

12. Contact

Questions? Email [email protected].