Privacy Policy

Last updated: July 27, 2026

This Privacy Policy explains how SMB AI Business Academy("we", "us") collects, uses, and protects information when you use our website and application (the "Service"). By using the Service you agree to the practices described here.

Information we collect

• Account information - your email address, name, and password (stored only as a secure hash).
• Usage and progress data - your activity in the Service, such as lessons viewed, work completed, and feature usage.
• Content you create - the notes, artifacts, messages, and other content you produce while using the Service.
• Payment information - handled by our payment processor, Polar. We receive confirmation of your subscription and plan, but we do not store your card number or full billing details.
• Communications - messages you send us and your email notification preferences.

How we use your information

• To provide, maintain, and improve the Service and its features.
• To personalize your experience and power AI-assisted features.
• To send transactional messages (e.g., account, billing, security) and, where you opt in, product or digest emails.
• To keep the Service secure and to detect, prevent, and address abuse.

How we share information

We do not sell your personal information. We share data only with the service providers we rely on to operate the Service, under agreements that limit their use of it:

• Polar - subscription billing and payment processing.
• OpenRouter / model providers - to power AI features (the relevant text of your request is processed to generate a response).
• Resend - transactional and notification email delivery.
• Cloudflare R2 - file and media storage.
• Hosting and error-monitoring providers - to run the Service and diagnose problems.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

Cookies

We use essential cookies to keep you signed in and operate the Service securely. We also set a first-party random identifier for up to 30 days to measure how visitors reach signup and whether learners reach key product milestones. We store campaign labels and the referring site's hostname, then discard the full referring URL. The cookie contains only a random ID. We do not use third-party advertising or cross-site tracking cookies.

Data retention

We retain your information for as long as your account is active or as needed to provide the Service. You may delete your account at any time, after which we delete or anonymize your personal data except where we are required to retain it for legal, accounting, or security purposes.

Your rights

Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, email us at [email protected].

Security

We protect your information with encryption in transit, encrypted storage, hashed passwords, and role-based access controls. No method of transmission or storage is perfectly secure, but we work to protect your data and to respond promptly to any incident.

International users

We operate from, and process data in, jurisdictions that may differ from yours. Where required, we use appropriate safeguards for international transfers. Contact us for more detail.

Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice.

Contact

Questions about this policy or your data? Email [email protected].