Privacy Policy

Who we are

AI Academy Platform is operated by EmbedAI, registered in the Netherlands. We provide an interactive learning platform for AI literacy, EU AI Act compliance, and professional AI training. This privacy policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

Contact: info@embedai.nl

What data we collect

We collect the following personal data when you use our platform:

• Full name, provided during registration
• Email address, used for authentication and communication
• Learning progress, including completed lessons, quiz scores, XP, and streaks
• Payment information, processed securely through Stripe (we never store card details)
• Usage data, such as pages visited and features used
• Preferences, including language, theme, and notification settings

Why we collect your data

We process your personal data for the following purposes:

• Account management: to create and maintain your user account
• Learning experience: to track your progress, award XP and certificates
• Billing: to process payments and manage subscriptions
• Communication: to send login codes, progress reports, and important updates
• Platform improvement: to understand how our platform is used and make it better

Legal basis

We process your data based on: contract performance (providing the learning platform), your consent (optional analytics, marketing emails), and legitimate interest (platform security, fraud prevention).

Cookies

We use essential cookies for authentication and site functionality. Analytics cookies are only placed with your explicit consent. For full details, see our Cookie Policy. Cookie Policy

Third-party services

We work with the following trusted service providers to operate our platform:

• Supabase: authentication and database hosting (EU region)
• Stripe: secure payment processing
• Resend: transactional email delivery
• Vercel: website hosting and delivery

Each provider processes data under their own privacy policy and in compliance with GDPR requirements.

Data retention

We retain your personal data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Some data may be retained longer where required by law (e.g. invoicing records for 7 years under Dutch tax law).

Your rights under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access: request a copy of your personal data
• Right to rectification: correct inaccurate personal data
• Right to erasure: request deletion of your personal data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interest
• Right to restriction: request restricted processing under certain conditions
• Right to withdraw consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at info@embedai.nl. We will respond within 30 days.

Supervisory authority

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or a notice on our platform.