Privacy notice

1. Who is responsible

RLGrowth OÜ, Estonia, operates AI Academy and is the data controller for personal information used to provide the academy. For privacy questions or rights requests, contact hello@growthmarketing.solutions.

This notice covers our academy website and learning service. Paddle processes purchase information under its own privacy notice as Merchant of Record.

2. Information we use and why

• Account information: email address, account identifier and authentication information; where provided through Google sign-in, basic profile information such as your name. Used to create your account, sign you in and manage access. Legal basis: performance of our contract with you. If you tell us how you found us, we store that answer with your account to understand which channels work.
• Learning information: completed modules and chapters, quiz results, experience points, learning history, selected path, resume position, saved cheatsheet entries, notes and exercise reflections you save. Used to provide learning features and synchronise saved progress with your account. Legal basis: performance of our contract.
• Tailored learning plans: goals, experience and weekly study time you submit, completed lesson identifiers and the resulting recommended sequence. Used to generate a plan through Lovable AI and save your latest plan to your account. Legal basis: performance of our contract when you request this feature. Do not include sensitive personal information in these inputs.
• Purchase and access records: account association, customer, subscription and transaction identifiers, plan, payment status and access period. Used to confirm paid access, manage subscriptions and maintain required records. Legal bases: contract performance and legal obligations.
• Technical information: IP address, browser and device information, request information and application errors, including page location and error details. Used to operate the site, investigate faults and prevent abuse. Legal basis: our legitimate interests in a reliable and secure service.
• Correspondence: your email address and information you send us. Used to respond to support, legal and privacy enquiries. Legal bases: contract performance, legitimate interests in responding to enquiries, and legal obligations for rights requests.

Payment card details are submitted to Paddle through its checkout rather than stored in the academy’s account records. Please avoid including sensitive personal information in notes, reflections or support messages.

Quiz

3. Who receives information

We share information needed to provide the service with these providers:

• Lovable Cloud: application hosting, account authentication, learning data storage, delivery of the learning path email and technical error reporting.
• Lovable AI and its model provider: process your submitted goals, experience, weekly study time and completed lesson identifiers to produce tailored recommendations. We do not include your email address, notes or exercise reflections in recommendation prompts.
• Google: optional Google sign-in, delivery of fonts and, only if you accept analytics cookies, Google Analytics 4 (see section 8). Loading Google-hosted fonts sends technical connection information, such as your IP address, to Google.
• Paddle: Merchant of Record for purchases, subscription management, payments, tax compliance, invoicing and refunds. Checkout receives your email address and an account identifier to associate your purchase with your academy account.
• Professional advisers, such as legal and accounting advisers, where needed; competent authorities where disclosure is required by law.

Providers’ own notices describe their independent processing: Paddle privacy notice and Google privacy policy.

4. International transfers

Some providers may process information outside Estonia or the European Economic Area. Where personal information is transferred outside the EEA, we will use applicable lawful safeguards, such as an adequacy decision or European Commission standard contractual clauses, as appropriate. Contact us for information about safeguards applicable to your data.

5. How long we keep information

We keep account and account-linked learning data while your account is active. Following a verified deletion request, we will delete or anonymise that information within 30 days, except records we must retain for legal obligations, resolving disputes or establishing or defending legal claims.

Purchase and accounting records are retained for the period required by applicable law. Support and technical records are kept only as long as necessary for their stated purpose, taking account of unresolved enquiries, security incidents and legal requirements, then deleted or anonymised.

Local learning data remains in your browser until you clear it; deleting your account does not itself clear browser storage. See our cookie policy.

6. Security

We commit to appropriate technical and organisational measures, including access controls, to protect personal information. Measures are proportionate to the information and risks involved. No internet service can guarantee absolute security.

7. Your rights

Under applicable data protection law, including the GDPR, you may request access, correction, deletion, restriction of processing and portability of your information. You may object to processing based on legitimate interests and withdraw consent where processing relies on consent, without affecting the lawfulness of prior processing.

Send requests to hello@growthmarketing.solutions. We may need to verify your identity. We will respond within one month; where the law permits an extension for complex or numerous requests, we will explain it within that first month. Some rights are subject to legal exceptions.

You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.

8. Analytics and cookies

If you accept analytics cookies, this website uses Google Analytics 4, provided by Google Ireland Limited, to measure which pages are visited, how visitors arrived (for example from a search engine, an AI assistant or LinkedIn), and the device and approximate country. Google Analytics sets the cookies _ga and _ga_<ID>, which last up to two years. Google Analytics 4 does not log or store IP addresses. We use this data only to understand which content and channels work. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time through Cookie settings in the footer. Data may be transferred to Google LLC in the United States, which is certified under the EU-US Data Privacy Framework. If you reject, no analytics cookies are set and no analytics data is sent.

9. Cookies and changes

Our cookie policy explains cookies, local storage and how to manage them. We will update this notice when our practices change and revise the date above. Material changes will be communicated through the service or, where appropriate, by email.