Privacy Policy

Last updated: 10 July 2026

1. Who we are

“The Agent Academy” (“we”, “us”) is a trading name operated as a sole-trader business in the United Kingdom, and is the controller of the data described here. Contact: a4you.ay4@gmail.com.

2. What we collect

• Account: your email; if you sign in with Google, also the profile name and photo Google sends us.
• Course data: the plans the onboarding assistant builds for you — they contain what you typed in the interview (your profession, the task, tools, operating system) — and, if you choose to save it, your Claude Code session ID so you can resume later.
• Subscription: processed by Stripe. Card details go directly to Stripe and never touch our servers; we keep only your customer identifier and subscription status.
• Waitlist: the email you submit to hear about new lessons.
• Site usage: analytics events in PostHog (EU-hosted), tied to a pseudonymous identifier (UUID) — not your raw email — so we can understand the funnel and improve the product.
• Technical logs: our infrastructure (Cloudflare) processes IP addresses and request headers in operational logs, and uses the request country to suggest the site language.

3. Why we use it (legal bases)

To deliver the course and your account (performance of a contract); to improve the product, measure the funnel and keep the service secure (legitimate interests); to email you about new lessons when you join the waitlist (consent — unsubscribe anytime); and to meet tax and accounting duties (legal obligation).

4. AI in onboarding

The interview conversation is processed by Google's Gemini API, on our server, to generate your plan. The conversation transcript is not stored in our database — it stays in your browser — and the final plan stays in your account until you delete it. Claude Code itself runs on your computer under your own Anthropic account: what you do there is between you and Anthropic (a third party not affiliated with us).

5. Who we share it with

We do not sell your data. We use providers that process data for us: Cloudflare (hosting and delivery), Supabase (database and sign-in), Stripe (payments), PostHog (analytics, EU-hosted), Resend (sign-in and welcome emails) and Google (Google sign-in and the onboarding Gemini API).

6. How long we keep it

Your account, for as long as it exists. Your plans, until you delete them — each one has a delete button in your history (download links expire on their own after 30 days). Your waitlist email, until you ask to be removed. Payment records, for as long as tax law requires.

7. International transfers

Some providers process data outside the UK/EEA (for example, in the US). Where that happens, the transfer relies on those providers' standard safeguards (such as standard contractual clauses or applicable adequacy frameworks).

8. Your rights

Under UK GDPR/GDPR (and equivalent protections such as Brazil's LGPD), you can request access, correction, deletion, portability, and object to certain uses. Email a4you.ay4@gmail.com — we respond to requests made from your account email. You can also complain to your data-protection authority (in the UK, the ICO).

9. Cookies and local storage

• Essential: the sign-in session cookie (Supabase, prefixed sb-) and the taa-locale language cookie.
• Analytics: PostHog uses a cookie/local storage (prefixed ph_) to recognise the same visitor across visits, tied to the pseudonymous identifier.
• Course local storage:your browser keeps the assistant's state and the module download token so you don't lose progress. We do not use advertising cookies.

10. Children

The service is not directed at children under 16.

11. Changes and contact

If this policy changes materially, we will flag it on the site or by email. Questions: a4you.ay4@gmail.com. See also our Terms of Use.