What we know about you, in plain terms.

Who we are

U2xAI Academy (“we”, “us”, the “Academy”) runs an online learning platform and an AI Career Toolkit for people building AI skills and applying for jobs. This policy covers the website, the learning platform, the Career Toolkit, and the emails we send. For any privacy question you can reach us at hello@u2xai.com.

Information we collect

• Account details. Your name, email address, and a securely hashed password. If you sign in with Google, we receive your name and email from Google and never see your Google password. If you tell us, your learner type (student or professional) and your institution or employer.
• Accounts created at checkout. If you buy a plan without signing up first, we create your account from the email address you give our payment processor during payment, and email you a link to set your password. The purchase and the account are otherwise identical to any other.
• Learning activity. Program progress, lesson and module completion, quiz attempts and scores, time spent, certificates earned, and activity events such as sign-ins and program launches. Interactive lessons report progress data so lessons resume where you stopped.
• Career Toolkit content. Everything you put into the career tools so they can work for you: your master profile (name, contact details, education, work history, skills), the resumes and cover letters you build or upload, job postings and job descriptions you paste or open, the jobs you track and the stages and dates you record against them, saved job searches and their alert settings, interview prep sessions including your drafted and practised answers, and fit scores computed against your profile. This is employment history and career information, and we treat it accordingly: it is used only to run the tools for you. We never sell it, and we never share it with employers or anyone else on your behalf.
• Voice practice. When you practise answers out loud, your audio is processed to produce transcripts and feedback. The transcripts and feedback are kept with your prep session so you can review them.
• Content you create. Notes, discussion threads and replies, assignment submissions (including any files you upload), and personal learning paths.
• Payment details. When you buy a plan, our payment processor (Stripe) collects and handles your card, UPI, or other payment information. We do not see or store full card numbers. We keep a customer and subscription reference, the plan and length you bought, the currency, amount, and status, so we can grant access and show your billing history.
• Messages and leads. If you use the popup, the contact form, or the site assistant, we keep the details you choose to leave: name, email, phone, and your message or conversation.
• Usage analytics. Our own first-party analytics record which pages are read and for how long, so we can see what is working. With your consent we also use Google Analytics, described under Cookies below.
• Technical information. Basic request data such as IP address, used for rate limiting and security, an approximate country used to show prices in your currency, and the theme preference stored in your browser.

How we use it

To run your account and sign you in; to give you access to the programs on your plan; to power the Career Toolkit, which by its nature works on the career information you give it; to record progress and issue certificates; to process payments and manage subscriptions and one-time passes; to send service emails such as welcome and set-password messages, purchase confirmations, job search alerts you asked for, completion notices, renewal-failure notices, and password resets; to answer your questions; to keep the service secure and prevent abuse; and to improve what we teach. We do not sell your data.

AI features

The Academy is built around AI features, and being clear about what they see matters. When you use the site assistant or the AI course tutor, the text of your messages and relevant lesson context is sent to our AI provider (Anthropic) to generate a response. When you use the Career Toolkit, the content the tool needs is sent for the same reason: the resume assistant sends what you tell it about yourself and the job posting you are targeting; interview prep sends your resume content and the job description so the questions come from your own material; voice practice sends your answers for feedback. That is the whole point of the tools, and it only happens when you use them.

We do not use your conversations or career content to train AI models, and our provider processes API data under terms that do not use it for training by default. Treat AI output as a draft: it can be wrong or incomplete, so review anything important before you rely on it.

Job search and external job boards

The job search tool queries third-party job sources and employers' own boards to find live postings. What is sent to those sources is the search itself, such as role keywords and location, never your identity, your resume, or your profile. When you open a posting you leave our site and the employer's or job board's own privacy terms apply.

Sharing you control

Some features let you create a share link on purpose, for example a certificate or a prep summary to show a mentor. Those pages are visible to anyone you give the link to, and only exist because you created them. Delete the shared item and the link stops working.

Cookies and analytics

A session cookie keeps you signed in. A local preference remembers your theme, and your approximate country decides which currency you see. Beyond that, we use Google Analytics to understand how the site is used, and it only starts after you accept the consent banner; decline and it stays off. If you arrive from an ad and buy, a Google Ads conversion event records that the ad led to a purchase; it does not carry your name, resume, or career content. We do not run third-party advertising cookies beyond that conversion measurement, and we do not sell or share your data for advertising.

Who we share it with

We use a small set of providers to run the service, and we share only what each one needs:

• Payments. Stripe, to take payment, manage subscriptions and one-time passes, issue invoices, and run the customer portal where you manage billing.
• Email. Our email provider, to deliver the service emails and the job alerts described above.
• File storage. Cloudflare R2, to store program files and uploads.
• AI. Anthropic, to power the assistant, the tutor, and the Career Toolkit features described above.
• Job data. Third-party job search sources, which receive search queries only, as described above.
• Analytics. Google, for the consent-based analytics and ad conversion measurement described above.
• Hosting and database. Our hosting provider, which runs the application and database.

We may also disclose information if the law requires it, or to protect the rights and safety of our users and the Academy. We never give your resume, profile, or career activity to employers, recruiters, or data brokers.

The affiliate program

This section applies only if you join the affiliate program. If you have not, none of it applies to you.

When you apply we collect your name, email address, mobile number and date of birth, and we record your consent to hold them, the time you gave it, and the network address you gave it from. The date of birth is used for one thing: to check you are 18 or over, which is a condition of the program. We ask for your consent under the Digital Personal Data Protection Act 2023, and you can withdraw it by closing your affiliate account.

Before we can pay you we need your PAN and your bank or UPI details, and you may give us a GSTIN. Your PAN and account number are encrypted before they are stored, never written to our logs, and never shown in full anywhere in the product: you and our staff both see only the last four characters. The full values are decrypted in exactly one place, the payment instruction our finance team works from, and every time that file is produced we record who produced it and when. We hold your PAN because Indian tax law requires us to deduct TDS on commission and to report it against a PAN, not because we want it.

While you are sharing your link we record each visit to it. We do not store the visitor's address or their browser details: both are turned into a one-way fingerprint that lets us count visits and spot obvious abuse, and cannot be turned back into the original. When somebody creates an account through your link we record that they did, and we show you their first name and last initial only. You never see their email address, their phone number, or what they paid.

If you were referred by somebody we set a cookie on your device recording which link brought you, and it lasts 90 days. It is used to credit that person if you create an account, and for nothing else. It carries no advertising identifier and is not shared with anybody.

If you close your affiliate account we anonymise it: your name, email, phone number, PAN, bank details and address are removed and your link stops working. Records of commission earned and payments made are kept, because tax law requires us to keep them, and after anonymisation they no longer identify you.

International transfers

Our providers may process data in countries outside your own, including the United States, the European Union, and India. Where that happens, we rely on the safeguards those providers offer for lawful international transfers.

How long we keep it

We keep account, learning, and Career Toolkit data for as long as your account is active, so your resumes, applications, and progress are there when you come back. If a paid window ends, your content stays on the free plan; nothing you made is deleted because a plan lapsed. We keep data for a reasonable period after account closure to meet legal, tax, and accounting duties, and certain records, such as payment and audit logs, are retained longer where the law requires. When you delete your account we remove your account, subscriptions, progress, notes, career content, and personal paths, and clear matching leads.

How we protect it

Passwords are stored only as secure hashes, never in plain text. Payment credentials live with Stripe, not with us. Access to systems is limited, files are served through access-checked routes, and your career content is only visible to your own signed-in account. No online service can promise perfect security, so please use a strong, unique password and keep it private.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your data, and to object to or restrict certain uses. You can do most of this yourself: when you are signed in, go to your account page to download everything we hold about you as a file, or to delete your account. Deletion cannot be undone. Job alert emails can be switched off from the saved search that created them, and you can decline or withdraw analytics consent at any time. Prefer to ask a person? Email hello@u2xai.com from the address on your account and we will help.

Children

The Academy is intended for adults and older students, and is not directed at children under 16. If you believe a child has given us personal data, contact us and we will remove it.

Changes to this policy

We may update this policy as the service changes. When we do, we will revise the date at the top of this page, and for significant changes we will give you reasonable notice.

Contact us

Questions about privacy or your data? Email hello@u2xai.com.