Loading…
This Privacy Policy explains what personal information ns-trainings.com (the "Site," "we," "us") collects, why we collect it, who we share it with, and the choices you have. It applies to anyone who creates an account, purchases a course, purchases AI Tutor credits, or uses the AI Tutor chat feature. It should be read together with our Terms of Service.
We are an early-stage, single-operator platform. We are being deliberately specific and honest below about what we actually collect and do — we are not claiming compliance with any particular regional privacy law (such as GDPR or CCPA), since that requires formal legal review we have not yet done. If you have specific rights under the law that applies to you, contact us and we will do our best to accommodate your request even where we haven't built a fully self-service process for it yet.
When you create an account (via our authentication provider, Supabase Auth), we collect your name, email address, and a securely hashed password. We do not see or store your plaintext password.
Every time you sign in, we record your IP address, browser/device user-agent string, and the timestamp of that login. We do this specifically to enforce our single-active-session policy (detecting and shutting down simultaneous logins to deter account sharing) and to keep a security audit trail we can review if account misuse is suspected.
Payments are handled entirely by PayPal. We never receive or store your full card number, bank details, or PayPal password. We do receive and store payment metadata from PayPal — such as the transaction ID, amount, currency, date, and what you purchased — for order records, support, accounting, and chargeback/dispute handling.
When you use the AI Tutor, we process the questions you type, along with the relevant excerpts of course transcripts your account is entitled to (retrieved to help answer your question), and send both to our chat backend and, in turn, to the underlying third-party AI language model providers that actually generate the answer (see Section 4). We may also process content from documents you personally upload to your own private study sets in the same way, only when you ask a question that draws on them.
We collect basic usage information (which pages/courses you access, credit consumption per AI Tutor message) needed to run and bill for the service, and some data stored only in your browser's local storage (such as your light/dark theme preference), which never leaves your device.
We do not sell your personal information to third parties, and we do not use your AI Tutor conversations for advertising. The advertising and measurement tools above never receive the content of your AI Tutor chats or your course notes.
We share information with the following third parties, only as needed to run the Site:
Meta and Google are named here because, once you agree, your browser sends data to them directly; if you do not agree, none of this is sent. We do not otherwise share your personal information with third parties, except where required by law, to enforce our Terms of Service, or with your consent.
We are early-stage and, honestly, have not yet finalized a formal data-retention schedule with specific time periods for each category of data. As a general practice today: account and transaction records are kept for as long as your account is active plus a reasonable period for accounting/legal purposes; login security records (IP/user-agent) are kept to support the security purposes described above; AI Tutor chat history is kept so you can return to prior conversations in a study set. We intend to formalize specific retention periods as the business matures, and will update this policy when we do rather than leave this section vague indefinitely.
We use industry-standard practices where we can — passwords are hashed by our authentication provider (never stored in plaintext), video is delivered via time-limited signed URLs rather than open links, and we log login activity to detect anomalies. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted to or stored on the Site.
You can request deletion of your account and associated personal data, or a copy of the data we hold about you, at any time by emailing [email protected] from the email address on your account. We will verify the request and act on it within a reasonable time. Note that we may need to retain certain records (such as payment transaction records) even after account deletion where we have a legitimate accounting, fraud-prevention, or legal reason to do so.
We use a small, secure, httpOnly session cookie to identify your active login session (used to enforce the single-active-session policy described above) and standard cookies set by our authentication provider. We also store your light/dark theme choice, and a cookie named ns_consent that remembers your cookie choice for 12 months. These are needed for the Site to work and do not need your consent.
If you arrive through a tracked link (for example from one of our emails), we save the campaign labels in the link (utm_source, utm_medium, utm_campaign, utm_content, utm_term) and any discount offer it carries in a first-party cookie called ns_attr for 90 days, so we can pre-fill your discount and learn which campaigns lead to purchases. If you buy a course, those labels are saved with the order. They describe the campaign, not you. Advertising click identifiers (fbclid, gclid) from Meta and Google links are saved in the same cookie only if you accepted marketing cookies.
When you first visit, a banner asks you to accept all, reject all, or choose. Until you choose, the optional tools above are not loaded and your browser sends nothing to Meta or Google. We also tell Google's tools, through Google Consent Mode, that consent is denied until you say otherwise.
Withdrawing or changing your consent: you can change your choice at any time, as easily as you gave it. Use here, or the "Cookie settings" link in the footer of the public pages, and untick what you no longer want. Withdrawing stops new data being sent from that point; it does not undo data Meta or Google already received, which you can manage through their own settings or ask us about. You can also clear this Site's cookies in your browser.
Because this policy is still pending legal review (see Section 1), we describe what the Site actually does rather than claiming it satisfies any particular regional cookie or privacy law.
The Site is intended for adults seeking professional/personal-development training and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
The Site may be accessed from many countries, and our infrastructure and the third-party providers listed in Section 4 may process data in locations other than your own. We are not claiming compliance with any specific country or region's data-protection framework in this policy; if you have specific legal rights that apply to you based on where you live, contact us at the address below and we will do our best to honor them.
We may update this Privacy Policy as the Site evolves — for example, when Phase 2 AI Tutor billing and usage-transparency features (per our own architecture roadmap) go live, or once we finalize a formal data-retention schedule. We will update the "Last updated" date above whenever we do.
Questions about this Privacy Policy, or a request to access, export, or delete your data, can be sent to [email protected].