What we collect, why, and what you can do about it.

Last updated · 5 June 2026

This policy applies to every page on LeadAI Academy (“LeadAI”, “we”, “our”). It explains what personal data we collect, why we collect it, who we share it with (almost no one), and the rights you have under GDPR (EU/UK), CCPA/CPRA (California), PIPEDA (Canada) and LGPD (Brazil).

1. What we collect

Identity & account

Name, email, profile picture (Google OAuth)
Role on LeadAI (BA, PM, SM, PO, RM) once chosen during onboarding
Optional public learner handle if you opt in to a public portfolio

Learning activity

Coach & roleplay chat transcripts (used only to provide memory continuity for your sessions)
Module completions, simulation attempts, inbox decisions, team-sim submissions and joint scores
Prompt-grade scores and the prompts you submitted

Usage & device

Pages viewed, feature interactions (first-party event counters; no ad networks)
Browser, device class, approximate region inferred from IP

2. Why we collect it

To run the service — deliver coach memory, score artefacts, and surface your XP.
To improve the curriculum — spot which sims people get wrong most.
To honour our contracts with enterprise customers — cohort dashboards.

3. AI coach data flow

Coach and roleplay chats are sent to ARIA, our governed AI engine, over an enterprise inference agreement. Under that agreement, your prompts and completions are not used to train foundation models. Sessions persist in our MongoDB to maintain memory between turns.

4. Sharing

We do not sell personal data. We share with: hosting and infrastructure providers under processor terms; our upstream AI inference provider (governed under ARIA’s enterprise agreement); analytics is first-party only.

5. Retention

Account data is kept for as long as your account is active. After account closure, we delete your personal data within 30 days, except where law requires us to keep records (e.g. tax/audit logs).

6. Your rights

Under GDPR / CPRA / PIPEDA / LGPD you can: access, correct, export and delete your data, and object to or restrict processing. To exercise any right, email [email protected] with the subject “Privacy request”.

7. International transfers

Our infrastructure runs in the EU and US. Where data crosses borders we rely on Standard Contractual Clauses and equivalents.

8. Children

LeadAI is built for working professionals. Users must be at least 16. We do not knowingly collect data from anyone under 16.

9. Changes

We’ll post material changes on this page and email account-holders at least 14 days before they take effect.

10. Contact

Privacy questions: [email protected]. See also Cookie Policy and Cookie Settings.