Privacy

Last updated: 12 June 2026.

What we collect

We collect the email address you use at checkout (via Lemon Squeezy) and at sign-in (via Supabase). We log download events so we can investigate access issues. We do not run third-party advertising trackers.

The test engine

The test engine stores your progress in your browser’s local storage only. Nothing is sent to our servers from the engine.

Processors

• Lemon Squeezy: payment processing, Merchant of Record.
• Supabase: authentication, database, file storage.
• BeeHiiv: email delivery for the welcome sequence and the lead-magnet list.
• Mux: video hosting (course videos only).
• Vercel: hosting.
• Sentry: error monitoring; may process technical data including IP address to diagnose faults.

Some processors (for example Sentry and Mux) may process data outside the UK. Where they do, the transfer relies on the UK International Data Transfer Addendum or equivalent safeguards.

Your rights

To access or delete the data we hold against your email, write to privacy@infosecai.net.

The data controller

The data controller is InfoSecAI Limited.