Privacy Policy

1. Who we are

AI Star Dev operates the learning platform at this website. This policy explains what personal data we collect, why, and your rights over it.

2. Data we collect

• Account data — name and email address when you sign up.
• Payment data — billing is handled by Stripe. We store only a Stripe customer reference; we never see or store full card numbers.
• Learning data — lesson progress, quiz attempts, assignment submissions, and AI tutor conversations.
• Technical data — IP address and browser type collected automatically in server logs.

3. How we use your data

• To provide course access, track progress, and issue certificates.
• To process payments and manage your subscription.
• To operate the AI tutor and assignment grader (questions and submissions are sent to the Anthropic API for processing).
• To send transactional emails (receipts, password resets, certificate notifications).
• To improve the platform through aggregated, anonymised usage analytics.

4. Third-party processors

We share data with the following processors, each bound by data-processing agreements:

• Supabase — database and authentication (EU/US hosting).
• Stripe — payment processing.
• Anthropic — AI tutor and assignment grading.
• Vercel — website hosting and edge functions.

We do not sell your personal data to any third party.

5. Cookies

We use a single session cookie to keep you logged in. We do not use advertising or tracking cookies. Analytics, if any, use privacy-first tools that do not set cookies.

6. Data retention

We retain your account and learning data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law (e.g., payment records for tax purposes, kept 7 years).

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any right, email hello@aistardev.com. We respond within 30 days.

8. Security

All data is transmitted over HTTPS. Database access is protected by row-level security policies so users can only access their own data. AI calls are rate-limited per user to prevent abuse.

9. Updates

We may update this policy. Material changes will be notified by email at least 14 days in advance.

10. Contact

Privacy questions: hello@aistardev.com