Last updated 17 October 2026
Privacy notice
This notice explains what personal data we collect when you use the site, why we collect it, who else handles it, and what you can ask us to do with it.
Who is responsible for your data
Upskill AI Academy is run by an individual based in the Philippines. We decide how your personal data is used, which makes us the personal information controller for it. For anything about your data, write to upskillwithaiacademy@gmail.com.
What we collect
- Your account: your email address and a password. Our sign-in provider stores the password in scrambled (hashed) form, so nobody can read it, including us. It also logs sign-ins, with the time, your IP address and browser, to keep accounts secure.
- About you, when you join: your first name and surname, your country if you give it, your role, the kind of company you work for, how often you use AI tools, how confident you feel using them, and what you hope to gain from the courses.
- Your learning record: which lessons you mark complete, the boxes you tick in lesson checklists, your quiz scores, the certificates issued to you, and the short check-in you can give after passing a course.
- Your purchases: which course and tier you bought, the date, the order reference and whether it was refunded, and the amount paid. We do not keep your card, bank or e-wallet details or your billing address.
- Messages you send us: what you write to upskillwithaiacademy@gmail.com and our replies.
- Technical data: our hosting provider keeps standard server logs, such as your IP address, browser type and the pages requested, for security and to fix faults.
We do not ask for, and you should not send us, sensitive personal information such as government ID numbers, health details or financial account numbers. The courses teach you to keep this kind of information out of AI tools too.
Why we use it
- To run your account and give you what you bought. This is needed to perform our agreement with you.
- To save your progress, show your completion records and issue your certificates, with the name you give us. This is part of the service you signed up for. Each certificate has an id, and anyone who has the id can check the name, course, date and score on our verification page. Only share a certificate with people you want to see it.
- To see whether the courses work and to improve them. We look at what learners hoped to gain and what they report after a course, mostly as totals. This is our legitimate interest in running useful courses.
- To answer your messages and process refunds. This is part of our agreement with you, and some refund records are kept to meet legal duties.
- To keep the site secure and working, for example by spotting abuse. This is our legitimate interest in running a safe service.
- To meet legal duties, such as keeping records of sales for tax.
We do not sell your data, we do not use it for advertising, and we do not send you marketing emails. We email you only about your account, such as confirming your address or resetting your password.
Who handles it for us
These service providers process personal data on our behalf, only to provide their service to us:
| Provider | What it does | Data it handles |
|---|---|---|
| Supabase | Accounts and the learning database | Email, hashed password, learning record, purchase records |
| Vercel | Hosts the website | Server logs, including IP address |
| Dodo Payments | Takes payments as the merchant of record | Everything you enter at checkout. It sends us an order reference, your email address, what you bought and the amount paid. |
| Resend | Sends account emails | Your email address |
| Google (Gmail) | Our support inbox | Messages you send us |
| Our video host | Plays the course videos | Your IP address and device details, when a page with a video loads |
Dodo Payments is the seller of record for your purchase. It collects your payment details itself and handles them under its own privacy notice, which you can read at checkout.
Where your data is stored
Our providers store and process data on servers outside the Philippines, including in Singapore and the United States. We use providers that protect data with encryption and access controls, and we share only what each one needs.
Cookies
The site uses only the cookies it needs to keep you signed in. It does not use advertising, analytics or tracking cookies. When a page shows a video, the video player comes from the video host, which may set its own cookies under its own policy.
How long we keep it
- Account and learning record: while you have an account. If you ask us to delete your account, we delete these within 30 days.
- Purchase records: for as long as tax and accounting rules require, even after your account is deleted. They keep the email address you bought with, so a purchase can be matched to you if you sign up again.
- Messages to us: for up to two years after our last reply, unless they relate to a dispute.
- Server logs: for the short period our hosting provider keeps them.
Your rights
In the Philippines, the Data Privacy Act of 2012 gives you the right to be informed, to access your data, to object, to have it corrected or erased, to receive a copy in a portable form, and to be paid damages if it is misused. People in other countries have similar rights under their own laws.
To use any of these rights, write to upskillwithaiacademy@gmail.com from the email address on your account. We reply within 15 days. If you are not happy with our answer, you can complain to the National Privacy Commission at privacy.gov.ph, or to the data protection authority where you live.
Keeping it safe
Data travels to and from the site over an encrypted connection, passwords are stored hashed, and the database lets each person read only their own records. If a breach puts your data at risk, we will tell you and the National Privacy Commission as the law requires.
Age
The site is for adults. You must be 18 or over to create an account, which is also the minimum age to use Claude.
Changes to this notice
If we change this notice, we update the date at the top. If a change affects how we use data you have already given us, we will email you before it takes effect.
See also the terms of use and the refund policy.