Privacy Policy

Last Updated: April 3, 2026

This Privacy Policy ("Policy") describes how edvantageAI, Inc. ("edvantageAI," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit www.edvantage.ai and related sites, platforms, and applications (collectively, the "Site"), or when you use our products, services, and community (collectively, the "Services"). The Services include Digital Products, Consultancy Services, and the Community, each as defined in our Terms of Service.

This Policy is incorporated into and forms part of the edvantageAI Terms of Service. Capitalized terms not defined in this Policy have the meanings assigned in the Terms of Service.

By accessing or using the Services, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with this Policy, please do not access or use the Services.

1. Scope of This Policy

This Policy applies to personal information collected through the Site, the Services, and any interactions you have with edvantageAI, including when you create an account, purchase or use Digital Products (such as courses, workshops, diagnostics, assessments, certifications, Bundles, and Subscriptions), engage in Consultancy Services (across our practice areas: Curriculum Development, Training and Certification, Customer Education, Data Systems, and Agentic AI Systems), participate in the Community, communicate with us via email or other channels, or attend events hosted by edvantageAI.

This Policy does not apply to information collected by third parties, including Third-Party Service Providers, Third-Party AI Providers, or any websites or services linked from the Site that are not owned or operated by edvantageAI. We encourage you to review the privacy policies of those third parties before providing them with your personal information.

If you are engaging edvantageAI for Consultancy Services and a separate data processing agreement or Master Services Agreement contains terms governing the processing of personal data, those terms will supplement and, where there is a conflict, take precedence over this Policy with respect to the data processed under that agreement.

1.1 Prohibited Data Collection Activities

You may not use any Content, AI Outputs, Generated Content, Generative Interface Content, or User Content from the Site or Services as training data, fine-tuning data, retrieval-augmented generation source material, or any other input for artificial intelligence models, machine learning systems, or automated content generation systems, whether operated by you or by third parties. Automated scraping, crawling, or data harvesting of the Site, Services, or Community is prohibited without prior written authorization from edvantageAI. For the complete list of prohibited activities, see Section 13.3 of the Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you interact with the Services, including:

Account Registration Information. When you create an account, we collect your name, email address, organization name, job title, and Login Credentials (such as a password or authentication key).
Purchase and Payment Information. When you make a purchase, we collect billing name, billing address, and payment method details. Payment card information is processed by our third-party payment processor and is not stored on our servers. For Subscriptions and Memberships with recurring billing, we retain payment method references necessary to process automatic renewals.
Profile Information. You may choose to provide additional information in your account profile, such as a biography, professional background, profile photo, or social media links.
Assessment and Diagnostic Inputs. When you use diagnostic assessments or reports, we collect the responses, data, and other information you submit as part of the assessment process.
Certification and Exam Data. When you register for and take certification exams, we collect exam registration details, exam responses, proctoring session data (including system environment information), and results.
Community Contributions. When you participate in the Community, we collect forum posts, discussion comments, replies, and other User Content you submit.
Communications. When you contact us via email, support forms, or other channels, we collect the content of your communications, including any attachments.
Consultancy Engagement Data. When you engage edvantageAI for Consultancy Services, we collect business information, project materials, system access credentials, and other information provided during the engagement as specified in the applicable Statement of Work.
Event Registration. When you register for workshops, webinars, or other events, we collect your name, email address, organization, and any information provided during registration.

2.2 Information Collected Automatically

When you access or use the Site and Services, we and our Third-Party Service Providers automatically collect certain information, including:

Device and Browser Information. IP address, browser type and version, operating system, device type, device identifiers, screen resolution, and language preferences.
Usage Data. Pages visited, features used, links clicked, time spent on pages, search queries within the Services, course progress, module completion status, and navigation paths.
Learning Activity Data. Course enrollment, progress, completion, quiz and assessment results, time spent on learning activities, and interaction patterns within Digital Products.
Log Data. Server logs that record requests made to the Site, including date and time stamps, referring and exit URLs, and error logs.
Location Data. Approximate geographic location derived from your IP address, used for tax calculation, content localization, and analytics purposes.

2.3 Information from Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activity and preferences. For detailed information, see Section 7 (Cookies and Tracking Technologies) of this Policy.

2.4 Information from Third Parties

We may receive personal information about you from third-party sources, including:

Third-Party Service Providers. Our learning management, commerce, credentialing, community hosting, and analytics providers may share usage data, transaction records, and account information with us in connection with the delivery of the Services.
Certificate and Badge Providers. If you create an account with our certificate provider to obtain a digital badge or certificate, that provider may share registration and credentialing information with us.
Publicly Available Sources. We may collect business contact information from publicly available sources, such as company websites or professional networking platforms, for sales and marketing purposes.
Referrals. If another individual refers you to edvantageAI, we may receive your name and contact information from that individual.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Providing and Operating the Services

Creating and managing your account
Processing purchases and delivering Digital Products
Administering certification exams, issuing certificates, and managing digital badges
Delivering diagnostic assessments and generating reports
Facilitating Community participation
Performing Consultancy Services engagements
Providing customer support and responding to inquiries

3.2 Personalization and Improvement

Personalizing your learning experience and recommending relevant content
Analyzing usage patterns to improve the Site and Services
Developing new products, features, and services
Conducting research and analytics to understand how the Services are used

3.3 Communications

Sending transactional communications, including purchase confirmations, enrollment notifications, and account updates
Sending marketing and promotional communications about edvantageAI products, services, and events (subject to your communication preferences)
Responding to your inquiries and support requests

3.4 AI-Assisted Processing

Processing assessment responses and generating diagnostic reports using AI systems, including Third-Party AI Providers
Generating personalized learning recommendations and adaptive content
Powering Generative Interfaces and Generated Content within Digital Products
Supporting Community features such as content curation and moderation assistance through edvantageAI-operated AI agents

3.5 Legal and Compliance

Calculating, collecting, and remitting applicable taxes
Enforcing our Terms of Service, this Policy, and other agreements
Complying with applicable laws, regulations, and legal processes
Detecting, preventing, and responding to fraud, abuse, security incidents, and other harmful activity
Protecting the rights, property, and safety of edvantageAI, our users, and the public

3.6 Aggregated Benchmarking and Research

Aggregating and anonymizing Diagnostic Inputs (as defined in the Terms of Service) submitted through diagnostics, assessments, and related Digital Products to create Aggregated Benchmark Data
Producing and distributing industry benchmarks, maturity indices, trend analyses, and comparative reports, including as paid Digital Products and Consultancy Services deliverables offered to third parties
Improving the accuracy and relevance of diagnostic instruments, assessment methodologies, and AI-assisted features
Conducting and publishing research, whitepapers, and thought leadership based on aggregated industry trends

Aggregated Benchmark Data is anonymized so that it does not identify, and cannot reasonably be used to identify, any individual or organization. edvantageAI will not include your name, your organization's name, or other directly identifying information in any benchmark report or benchmark-derived product without your prior written consent. Prior to final aggregation, edvantageAI may temporarily re-associate Diagnostic Inputs with account or session identifiers solely for debugging, data quality validation, or error investigation. See Section 12.4 for additional detail on deidentified data safeguards. For additional details on benchmark data rights, see Section 3.3.1 of the Terms of Service.

3.7 Business Operations

Managing our business operations, including accounting, auditing, and internal reporting
Facilitating corporate transactions such as mergers, acquisitions, or asset sales

4. Legal Bases for Processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, we process your personal data only when we have a valid legal basis to do so. The legal bases we rely on include:

Legal Basis	When It Applies
Performance of a Contract	Processing necessary to fulfill our obligations under the Terms of Service or an applicable Statement of Work, including creating your account, delivering Digital Products, processing payments, and performing Consultancy Services.
Legitimate Interests	Processing necessary for our legitimate interests, provided those interests are not overridden by your rights. This includes improving the Services, conducting analytics, creating Aggregated Benchmark Data from anonymized Diagnostic Inputs for benchmarking and research purposes (including commercial benchmark products), preventing fraud, securing the Site, and sending relevant marketing communications to existing customers. You have the right to object to processing based on legitimate interests.
Consent	Where you have given us specific, informed consent to process your data for a particular purpose. This includes consent for marketing communications to prospective customers and the use of non-essential cookies. You may withdraw consent at any time.
Legal Obligation	Processing necessary to comply with a legal obligation to which edvantageAI is subject, such as tax reporting, responding to lawful requests from public authorities, or complying with applicable data protection laws.

We do not sell your personal information to third parties. We share personal information only in the following circumstances:

5.1 Third-Party Service Providers

We share personal information with Third-Party Service Providers who perform services on our behalf, including learning management system providers, commerce and payment processors, credentialing and digital badge providers, community hosting platforms, email delivery services, analytics providers, and customer support tools. These providers are authorized to use your personal information only as necessary to provide services to edvantageAI and are contractually obligated to protect your information.

5.2 Third-Party AI Providers

When you use Services that incorporate AI-assisted features, your inputs (such as assessment responses or diagnostic data) may be transmitted to Third-Party AI Providers to generate AI Outputs. edvantageAI designs the Prompts and configures the systems, but Third-Party AI Providers process the data according to their own terms and privacy policies. We select Third-Party AI Providers that maintain appropriate data protection standards and we contractually require them to protect your data. We do not authorize Third-Party AI Providers to use your personal information to train their general-purpose models, unless you are separately informed and consent to such use.

5.3 Subprocessors

We engage Subprocessors to process personal data on our behalf in connection with the delivery of the Services. We maintain a list of authorized Subprocessors, available upon request by contacting [email protected]. We will notify you in writing at least fifteen (15) days before engaging any new or replacement Subprocessor. You may object to a new Subprocessor on reasonable grounds relating to the protection of personal information by providing written notice at least ten (10) days before the intended commencement of the engagement. If you object, edvantageAI will either not appoint the Subprocessor to process your data or you may elect to suspend or terminate the Agreement. Subprocessors are bound by data protection obligations substantially similar to those in this Policy.

5.4 Certificate and Badge Providers

If you earn a certification or digital badge, we share your name, email address, certification status, and related information with our certificate and directory management providers to facilitate issuance, verification, and display of your credentials.

5.5 Affiliates

We may share personal information with our Affiliates for the purposes described in this Policy. Affiliates are bound by this Policy or equivalent data protection obligations.

5.6 Legal and Compliance Disclosures

We may disclose personal information when we believe in good faith that disclosure is necessary to comply with applicable law, regulation, or legal process (such as a court order or subpoena), to enforce our Terms of Service or other agreements, to protect the rights, property, or safety of edvantageAI, our users, or the public, and to detect, prevent, or address fraud, security, or technical issues.

5.7 Business Transfers

In connection with a merger, acquisition, reorganization, asset sale, bankruptcy, or similar corporate transaction, your personal information may be transferred to the acquiring entity or successor. We will provide notice before your personal information becomes subject to a different privacy policy as a result of such a transaction.

5.8 With Your Consent

We may share your personal information for other purposes with your explicit consent.

6. AI Systems and Data Processing

Certain Services incorporate artificial intelligence systems, including AI agents, Generative Interfaces, and automated decision-support tools. This section describes how personal information is processed in connection with AI-assisted features.

AI systems are probabilistic in nature. The same inputs may produce different outputs at different times. AI Outputs, Generated Content, and Generative Interface Content may contain errors, omissions, or inaccuracies. These outputs are provided for informational and advisory purposes and should not be relied upon as your sole basis for making business, legal, financial, or technical decisions. Diagnostic results and reports generated through AI-assisted features represent point-in-time evaluations and are advisory in nature. For additional disclaimers, see Sections 3.9, 3.10, and 3.11 of the Terms of Service.

6.1 What Data Is Processed by AI Systems

When you use AI-assisted features within the Services, the following types of data may be processed by AI systems:

Assessment and diagnostic responses you submit
Questions, prompts, or inputs you provide to Generative Interfaces or AI-assisted features
Learning activity data used to personalize recommendations
User Content submitted in the Community that is processed by edvantageAI-operated AI agents for moderation assistance, content curation, learning support, or guided workflows. All edvantageAI AI agents in the Community are clearly identified with a visible designation such as "AI Agent," "AI Assistant," or "System-Generated" and will not impersonate human members.

6.2 How AI Processing Works

edvantageAI designs Prompts, configures system parameters, and curates inputs before transmitting data to AI systems. Some processing occurs on AI infrastructure operated by Third-Party AI Providers, while other processing occurs on systems operated by edvantageAI. The level of Human Oversight varies by Service type, as described in Section 3.10 of the Terms of Service.

6.3 AI Data Retention and Use

Inputs submitted to AI-assisted features are retained by edvantageAI in accordance with Section 8 (Data Retention) of this Policy. We do not authorize Third-Party AI Providers to retain your personal data beyond the period necessary to generate the requested output, unless otherwise disclosed. We do not use your personal data to train edvantageAI's proprietary AI models without your separate, informed consent.

Generated Content and Generative Interface Content may be ephemeral, session-based, or state-dependent. Unless expressly stated in the applicable Service description, edvantageAI does not guarantee that such content will be stored, recoverable, exportable, or available after your session ends. Where Generated Content is stored, it is retained in accordance with the retention periods in Section 8.

6.4 Automated Decision-Making

Certain Services may involve automated processing that contributes to decisions affecting you, such as adaptive learning path recommendations or diagnostic scoring. These features are designed to assist, not replace, human judgment. You are not subject to decisions based solely on automated processing that produce legal or similarly significant effects without Human Oversight, unless you have given explicit consent or such processing is necessary for the performance of a contract. If you are located in the EEA, UK, or Switzerland, you have the right to request human review of any automated decision that significantly affects you.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. We also use web beacons (also known as pixels or clear GIFs), local storage, and similar technologies (collectively, "Tracking Technologies") to collect information about your browsing activity.

7.2 Types of Cookies We Use

Category	Purpose	Examples
Strictly Necessary	Essential for the Site to function. These cookies enable core features such as authentication, security, and account access. They cannot be disabled.	Session cookies, authentication tokens, CSRF protection
Functional	Enable enhanced functionality and personalization, such as remembering your preferences and settings.	Language preferences, display settings, recently viewed content
Analytics and Performance	Help us understand how visitors interact with the Site by collecting information about pages visited, time on site, and navigation patterns. This data is aggregated and used to improve the Site.	Google Analytics, usage analytics
Marketing and Advertising	Used to deliver relevant advertisements, measure campaign effectiveness, and build audience profiles for targeted advertising. These cookies may track your activity across websites.	Retargeting pixels, conversion tracking, social media pixels

7.3 Managing Your Cookie Preferences

When you first visit the Site, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies. You may update your cookie preferences at any time by clicking the "Cookie Settings" link in the Site footer.

You can also control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling cookies may affect the functionality of the Site. The following links provide information on how to manage cookies in common browsers:

7.4 Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals to websites. Because there is no universally accepted standard for how to respond to DNT signals, the Site does not currently respond to DNT signals. We will update this Policy if a uniform standard is adopted.

7.5 Google Analytics

We use Google Analytics to collect and analyze usage data. Google Analytics uses cookies to collect information such as how often you visit the Site, what pages you view, and what other sites you visited before arriving at the Site. We use this information to improve the Site. Google Analytics collects the IP address assigned to you on the date you visit the Site but does not associate it with other data held by Google. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods vary based on the type of information and the purpose of processing:

Data Category	Retention Period
Account information	For the duration of your account, plus a reasonable period after account closure to fulfill legal obligations and resolve disputes
Purchase and payment records	As required by applicable tax and accounting laws (typically 7 years from the date of transaction)
Learning activity and course completion data	For the duration of your account. Certification records may be retained indefinitely to support credential verification.
Diagnostic and assessment data (identifiable)	For the duration of your account, unless a shorter retention period is specified in the applicable Digital Product description
Aggregated Benchmark Data (anonymized)	Retained indefinitely. Because Aggregated Benchmark Data is anonymized and cannot be used to identify any individual or organization, it is not subject to deletion requests.
Community contributions (User Content)	For the duration of the Community or as long as reasonably necessary. You may request deletion of your posts as described in Section 11.
Consultancy Services data	As specified in the applicable Statement of Work or Master Services Agreement, or as required by law
Generated Content and Generative Interface Content	May be ephemeral and session-based. Where stored, retained for the duration of your account or as specified in the applicable Service description.
Communications and support records	For a reasonable period necessary to resolve inquiries and improve support quality
Cookie and analytics data	As specified per cookie category. Analytics data is typically retained for 26 months.

When personal information is no longer needed for the purposes described in this Policy or required by law, we will securely delete or anonymize it. Anonymized data that can no longer be used to identify you may be retained indefinitely for research and analytics purposes.

9. Data Security

edvantageAI uses commercially reasonable physical, managerial, and technical safeguards to protect the integrity, confidentiality, and availability of your personal information. Our security measures include encryption of data in transit using TLS, access controls and authentication mechanisms, regular security assessments and vulnerability monitoring, and employee training on data protection and security practices.

However, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee that unauthorized third parties will never be able to defeat our security measures or use your personal information for improper purposes. You acknowledge that you provide your personal information at your own risk.

You are responsible for maintaining the confidentiality of your Login Credentials. If you believe an unauthorized person has gained access to your account, you must notify edvantageAI immediately at [email protected].

10. International Data Transfers

edvantageAI is based in the United States, and the Services are controlled and operated from facilities in the United States. If you access the Services from outside the United States, your personal information will be transferred to and processed in the United States and potentially other countries where our Third-Party Service Providers and Subprocessors operate.

If you are located in the EEA, UK, or Switzerland, we ensure that transfers of personal data to countries outside the EEA, UK, or Switzerland are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, adequacy decisions by the European Commission or UK Secretary of State, and binding corporate rules or other approved transfer mechanisms, where applicable.

If you are located in Canada, we ensure that your personal information receives a comparable level of protection when transferred outside of Canada, consistent with the requirements of the Personal Information Protection and Electronic Documents Act (PIPEDA).

To obtain a copy of the safeguards we use for international data transfers, please contact [email protected].

11. Your Privacy Rights

Depending on your location, you may have certain rights with respect to your personal information. edvantageAI respects your privacy rights and will respond to requests in accordance with applicable law. You may exercise any of the following rights by contacting [email protected]:

Access. You may request a copy of the personal information we hold about you.
Correction. You may request that we correct inaccurate or incomplete personal information.
Deletion. You may request that we delete your personal information, subject to certain exceptions required by law.
Portability. You may request that we provide your personal information in a structured, commonly used, machine-readable format.
Restriction. You may request that we restrict the processing of your personal information under certain circumstances.
Objection. You may object to the processing of your personal information where we rely on legitimate interests as our legal basis.
Withdrawal of Consent. Where we process personal information based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Opt-Out of Marketing. You may opt out of marketing communications at any time by using the unsubscribe link in any marketing email or by contacting [email protected]. Opting out does not affect transactional communications.

We will respond to your request within the timeframe required by applicable law (typically 30 days for GDPR and 45 days for CCPA/CPRA). We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

12. Additional Disclosures for California Residents (CCPA/CPRA)

This section provides additional disclosures required under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"), for California residents.

12.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

CCPA Category	Examples	Sources
Identifiers	Name, email address, IP address, account name	Directly from you; automatically collected; third parties
Customer Records (Cal. Civ. Code 1798.80(e))	Name, billing address, payment information	Directly from you
Commercial Information	Purchase history, products or services purchased, transaction details	Directly from you; Third-Party Service Providers
Internet or Electronic Network Activity	Browsing history on the Site, interaction with the Services, search queries, device information	Automatically collected
Geolocation Data	Approximate location derived from IP address	Automatically collected
Professional or Employment-Related Information	Job title, organization name, professional background	Directly from you
Education Information	Course enrollment, completion records, certification status, assessment results	Directly from you; generated through use of Services
Inferences	Learning preferences, content recommendations, skill-level assessments derived from usage data	Generated by edvantageAI from other categories

12.2 Sale and Sharing of Personal Information

edvantageAI does not sell your personal information as defined by the CCPA. edvantageAI may share personal information with third-party advertising partners for cross-context behavioral advertising purposes through the use of marketing cookies and pixels. California residents have the right to opt out of this sharing by adjusting cookie preferences through the "Cookie Settings" link in the Site footer or by contacting [email protected].

12.3 Your California Privacy Rights

As a California resident, you have the following rights under the CCPA:

Right to Know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collecting or sharing, and the categories of third parties with whom we share personal information.
Right to Delete. You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
Right to Correct. You have the right to request correction of inaccurate personal information.
Right to Opt Out of Sharing. You have the right to opt out of the sharing of your personal information for cross-context behavioral advertising.
Right to Limit Use of Sensitive Personal Information. We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA.
Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights.

To exercise your rights, contact [email protected] or submit a request through the Site. We will verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf by providing a signed written authorization or power of attorney.

12.4 Deidentified Data

edvantageAI collects Diagnostic Inputs and uses them to create Aggregated Benchmark Data, which is anonymized and aggregated so that it does not identify any individual or organization. Under the CCPA, deidentified information that cannot reasonably be used to infer information about, or otherwise be linked to, a particular consumer or household is not considered personal information. edvantageAI maintains technical safeguards and business processes designed to prevent re-identification of Aggregated Benchmark Data. edvantageAI does not attempt to re-identify Aggregated Benchmark Data and contractually prohibits downstream recipients from doing so. However, prior to final aggregation, edvantageAI may temporarily re-associate Diagnostic Inputs with account or session identifiers solely for the purposes of debugging, data quality validation, or investigating errors in the aggregation pipeline. Such temporary re-association is limited to authorized personnel, logged for audit purposes, and the identifiable association is removed promptly after the issue is resolved. Aggregated Benchmark Data may be used by edvantageAI for any lawful purpose, including commercial purposes such as paid benchmark reports and benchmark-derived products, without restriction under the CCPA.

12.5 California Shine the Light

Under California Civil Code Section 1798.83, California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

13. Additional Disclosures for EEA, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, the following additional provisions apply to you.

13.1 Data Controller

edvantageAI, Inc. is the data controller for the personal data processed through the Services. Our contact details are provided in Section 20 of this Policy.

13.2 Your Rights Under GDPR

In addition to the rights described in Section 11, you have the following rights:

Right to Lodge a Complaint. You have the right to lodge a complaint with a supervisory authority in the EU/EEA Member State or UK where you reside, where you work, or where the alleged infringement took place. A list of EEA supervisory authorities is available at https://edpb.europa.eu. For the UK, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.
Right to Object to Automated Decision-Making. You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significant effects. See Section 6.4 of this Policy for more information.

13.3 Data Protection Officer

If you have questions about how we process your personal data or wish to exercise your rights, you may contact us at [email protected].

13.4 International Transfer Safeguards

As described in Section 10, we rely on Standard Contractual Clauses and other approved mechanisms to ensure that personal data transferred outside the EEA, UK, or Switzerland is adequately protected.

14. Additional Disclosures for Canadian Residents (PIPEDA)

If you are located in Canada, the following additional provisions apply.

14.1 Consent

We collect, use, and disclose your personal information with your knowledge and consent, except where otherwise permitted or required by law. By using the Services, you consent to the collection, use, and disclosure of your personal information as described in this Policy. You may withdraw your consent at any time by contacting [email protected], subject to legal or contractual restrictions. We will inform you of the implications of withdrawal.

14.2 Your Rights Under PIPEDA

Under PIPEDA, you have the right to access the personal information we hold about you and to request corrections to any inaccurate or incomplete information. You also have the right to challenge our compliance with PIPEDA by filing a complaint with us or with the Office of the Privacy Commissioner of Canada.

To make an access or correction request, contact [email protected]. We will respond within 30 days, as required by PIPEDA.

14.3 Accountability

edvantageAI is responsible for personal information in our possession or custody, including information that has been transferred to third parties for processing. We use contractual means to provide a comparable level of protection while the information is being processed by a third party.

15. Authorized Subprocessors

The following is the current list of companies authorized to process personal information on behalf of edvantageAI in connection with the delivery of the Services. This list includes each Subprocessor's name, location, purpose of processing, and the applicable lawful transfer mechanism where relevant.

edvantageAI will update this list when new or replacement Subprocessors are engaged. In accordance with Section 10.2 of the Terms of Service, edvantageAI will provide at least fifteen (15) days' advance written notice before engaging any new or replacement Subprocessor. You may object to a new Subprocessor on reasonable grounds relating to the protection of personal information by providing written notice at least ten (10) days before the intended commencement of the engagement. To receive Subprocessor change notifications, contact [email protected].

Last Updated: April 3, 2026

15.1 Infrastructure Providers

Subprocessor	Location	Purpose of Processing
Google Cloud Platform (Google LLC)	United States	Cloud infrastructure, data storage, and compute services

15.2 Service Delivery Providers

Subprocessor	Location	Purpose of Processing
Thinkific Labs Inc.	Vancouver, British Columbia, Canada	Learning management system; course delivery, enrollment, progress tracking, and learner data storage
Accredible Inc.	San Francisco, California, United States	Digital certification and badge issuance, credential verification, and directory management
Stripe, Inc.	San Francisco, California, United States	Payment processing, subscription billing, and transaction management

15.3 Communications and Marketing Providers

Subprocessor	Location	Purpose of Processing
Intuit Mailchimp (The Rocket Science Group LLC)	Atlanta, Georgia, United States	Email delivery, marketing communications, and audience management

15.4 Analytics Providers

Subprocessor	Location	Purpose of Processing
Google Analytics (Google LLC)	United States	Website analytics, usage tracking, and performance measurement

15.5 Third-Party AI Providers

The following Third-Party AI Providers are authorized to process personal information in connection with AI-assisted features within the Services, including the generation of AI Outputs, Generated Content, and Generative Interface Content. edvantageAI designs Prompts and configures system parameters but does not control the underlying models, training data, or behavior of these providers. For additional disclosures, see Section 6 (AI Systems and Data Processing) and Section 3.9 of the Terms of Service.

Subprocessor	Location	Purpose of Processing
Anthropic PBC	San Francisco, California, United States	Large language model provider (Claude); AI Output generation, content analysis, and AI-assisted features
OpenAI, L.L.C.	San Francisco, California, United States	Large language model provider (GPT); AI Output generation, content analysis, and AI-assisted features
OpenRouter, Inc.	New York, New York, United States	AI model routing and orchestration; API gateway for accessing multiple AI model providers

edvantageAI does not authorize Third-Party AI Providers to use your personal information to train their general-purpose models unless you are separately informed and provide consent. edvantageAI contractually requires Third-Party AI Providers to maintain appropriate data protection and security standards and to limit data retention to the period necessary to generate the requested output.

16. Children's Privacy

The Services are not directed to children under the age of 13 (or under 16 in Europe). We do not knowingly collect personal information from children under these ages. If you believe that we have inadvertently collected personal information from a child under the applicable age, please contact us immediately at [email protected], and we will take steps to delete the information promptly.

17. Third-Party Links and Services

The Site and Services may contain links to third-party websites, services, and applications that are not owned or operated by edvantageAI. This Policy does not apply to those third-party services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party service before providing personal information.

The Services are delivered in part through Third-Party Service Providers as described in Section 13.1 of the Terms of Service. Your use of those provider platforms may be subject to their own terms of service and privacy policies.

18. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, the Services, or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this Policy and notify you by posting the revised Policy on the Site. For material changes that significantly affect how we use or share your personal information, we will use commercially reasonable efforts to provide advance notice via email or a prominent notice on the Site before the changes take effect.

Your continued use of the Services after any changes to this Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

19. Dispute Resolution

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact us first at [email protected]. We will work to resolve your concern within a reasonable timeframe.

If your concern remains unresolved, you may have the right to file a complaint with the appropriate data protection authority in your jurisdiction, as described in the applicable regional disclosures above.

Disputes arising from this Policy are subject to the governing law, arbitration, and dispute resolution provisions set forth in Section 14 of the Terms of Service.

20. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

edvantageAI, Inc.
Alameda, CA 94501
United States

Privacy Inquiries: [email protected]
General Support: [email protected]
Legal Inquiries: [email protected]
Community Issues: [email protected]

For data subject access requests, deletion requests, or other privacy rights requests, please email [email protected] with the subject line "Privacy Rights Request."