Privacy Policy

At LeadThe.AI, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI training platform.

By using our service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Company/organization name
• Job title and department
• Password (encrypted and hashed)
• Profile photo (optional)

Usage Data

We automatically collect information about how you interact with our platform:

• Course progress and completion status
• Assessment scores and responses
• Daily session activity and time spent
• Feature usage and navigation patterns
• Search queries within the platform

Device and Technical Information

We collect technical information about your device and connection:

• IP address and geographic location
• Browser type and version
• Operating system
• Device identifiers
• Referring URLs and pages visited
• Timestamps of access

Communications

If you contact us directly, we may receive:

• Email correspondence
• Support ticket messages
• Feedback and survey responses

2. How We Use Information

We use the collected information for the following purposes:

Service Delivery

• Provide and maintain the AI training platform
• Track and display your course progress
• Generate personalized learning recommendations
• Calculate assessment scores and maturity levels
• Enable collaboration features (leaderboards, team views)

Analytics and Improvement

• Analyze platform usage and user behavior
• Identify trends and areas for improvement
• Develop new features and functionality
• Monitor and improve platform performance

Communication

• Send email notifications about course progress
• Provide customer support
• Send administrative information and updates
• Notify you of changes to our services

Legal and Security

• Prevent fraud and abuse
• Comply with legal obligations
• Enforce our Terms of Service
• Protect our rights and property

3. Data Sharing & Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Within Your Organization

Your company administrators and managers can access:

• Your course progress and completion status
• Assessment scores and AI adoption metrics
• Team performance comparisons
• Usage analytics (aggregated and individual)

Service Providers

We share information with third-party service providers who assist us in operating the platform:

• Cloud hosting providers (data storage and infrastructure)
• Email delivery services (transactional emails and notifications)
• Analytics providers (platform usage and performance)
• Payment processors (subscription billing)

These providers are bound by confidentiality agreements and may only use your information to perform services on our behalf.

Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders or legal process
• Law enforcement requests
• Protection of our legal rights
• Prevention of illegal activity or harm

Business Transfers

If LeadThe.AI is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice on our platform of any such change in ownership.

4. Data Security

We implement industry-standard security measures to protect your information:

Technical Safeguards

• Encryption in transit (TLS/SSL)
• Encryption at rest for sensitive data
• Secure password hashing (bcrypt)
• Regular security audits and penetration testing
• Firewall protection and intrusion detection

Access Controls

• Multi-tenant data isolation (company-level separation)
• Role-based access control (RBAC)
• Two-factor authentication (2FA) available
• Session timeout and secure cookie handling
• Limited employee access to user data

Important: No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights (GDPR & CCPA Compliance)

Depending on your location, you may have the following rights regarding your personal information:

GDPR Rights (EU Users)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Restrict Processing: Limit how we use your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing at any time

CCPA Rights (California Users)

• Right to Know: Request information about data collection and use
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of exercising privacy rights

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@leadthe.ai. We will respond to your request within 30 days (GDPR) or 45 days (CCPA).

You may also access and update some of your information directly through your account settings.

6. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

Essential Cookies

Required for platform functionality (authentication, session management, security). These cannot be disabled without affecting platform functionality.

Analytics Cookies

Help us understand how users interact with the platform to improve performance and user experience. You can opt-out of analytics tracking in your account settings.

Preference Cookies

Store your preferences (language, theme, display settings) to personalize your experience.

Most browsers allow you to control cookies through their settings. However, disabling cookies may affect platform functionality.

7. Children's Privacy

Our service is intended for users aged 18 and older. We do not knowingly collect personal information from children under 18.

If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside your state, province, country, or other governmental jurisdiction.

If you are located outside the United States, please note that we transfer data to the United States and process it there.

For EU users: We comply with GDPR requirements for international data transfers, including the use of Standard Contractual Clauses (SCCs) when transferring data outside the EU/EEA.

9. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data retained while your account is active
• Inactive Accounts: Data may be retained for up to 90 days after account closure
• Legal Requirements: Some data may be retained longer to comply with legal obligations (e.g., tax records, audit logs)
• Aggregated Data: Anonymized, aggregated data may be retained indefinitely for analytics

After the retention period, we securely delete or anonymize your personal information.

10. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Updating the "Last updated" date at the top of this page
• Sending you an email notification (for significant changes)
• Displaying a prominent notice on the platform

We encourage you to review this Privacy Policy periodically. Your continued use of the service after any modifications indicates your acceptance of the updated Privacy Policy.

11. Contact & Data Protection Officer

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

EU Representative: For GDPR inquiries, you may contact our EU representative at eu-privacy@leadthe.ai

Supervisory Authority: EU users have the right to lodge a complaint with their local data protection authority.