Privacy Policy

Last Updated: January 2026

1. Introduction

AI Academy ("we", "us", or "our") operates the website aiacademyos.com. We are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you purchase our courses or use our services.

For the purposes of the General Data Protection Regulation (GDPR) and the Law on Personal Data Protection of the Republic of Serbia, the Data Controller is AI Academy, located at ZAPADNO SELIŠTE 027C, Belgrade, Serbia.

2. Information We Collect

We collect the minimum amount of data necessary to provide our services:

• Account Data: When you register, we collect your email address and authentication credentials. This data is processed securely via Google Firebase Authentication.
• Transaction Data: We do not store your payment card details (credit card numbers). All payments are processed by our Merchant of Record, Lemon Squeezy, which acts as a reseller. We only receive limited transaction information (such as your name, email, and product purchased) to fulfill your order.
• Usage Data: We collect server logs (IP address, browser type) strictly for security purposes and to prevent abuse of our platform.

3. How and Why We Use Your Data

We process your personal data based on the following legal grounds:

• To Provide the Service (Performance of Contract): We use your email to create your account, grant access to the course, and send essential transactional emails (login details, receipts via Lemon Squeezy).
• To Communicate with You (Consent): If you actively subscribed to our newsletter, we use your email to send updates via Brevo. You can unsubscribe at any time.
• To Ensure Security (Legitimate Interest): We use Firebase logs to protect our platform from unauthorized access and attacks.

4. Service Providers (Data Processors)

We do not sell your data. We share data only with trusted third-party service providers necessary to run our business. All transfers are protected by appropriate legal agreements.

• Lemon Squeezy (Merchant of Record): Handles payments, tax compliance, and order fulfillment. (Location: USA/Global)
• Google Firebase (Infrastructure): Provides secure database hosting and user authentication. (Location: USA/Global)
• Brevo (Email Marketing): Used for sending newsletters and updates. (Location: EU)
• Content Creation Tools: We use OpenAI (ChatGPT) as a tool to assist in creating educational content. We do not share your personal account data (such as your email, IP address, or payment details) directly with OpenAI via API. Any data processed by OpenAI during content creation is anonymized and strictly related to the subject matter of the course, not your personal identity.

International Transfers: Since some of our providers (like Google and Lemon Squeezy) are located outside of Serbia and the EEA (specifically in the USA), we ensure your data is protected through standard contractual clauses (SCCs) or reliance on the Data Privacy Framework where applicable, ensuring a level of protection equivalent to European and Serbian standards.

5. Cookies and Tracking

We do not use tracking cookies, marketing pixels (like Facebook Pixel), or third-party analytics (like Google Analytics).

• Essential Cookies Only: We use only strictly necessary cookies provided by Google Firebase to maintain your secure login session. Without these, you would not be able to access the course content. By using our site, you acknowledge the use of these essential technologies.

6. Your Rights

Under GDPR and Serbian Law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate data.
• Erasure ("Right to be Forgotten"): Request that we delete your account and data (unless we are legally required to keep it for tax purposes).
• Objection: Object to the processing of your data for marketing purposes.
• Complaint: Lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection in Serbia (Poverenik) or your local data protection authority in the EU.

To exercise any of these rights, please contact us at: the.aiacademy.info@gmail.com.

7. Data Retention

We retain your account data for as long as you have an active account to provide you with access to the course. Transaction records are retained by Lemon Squeezy in accordance with tax laws (typically 10 years). Marketing emails are kept until you unsubscribe.

8. Changes to This Policy

We may update this policy to reflect changes in our services or laws. The latest version will always be available on this page.

---

← Back to Home