Privacy notice
What information AI Licenses processes, why it does so, and what rights you have.
Draft — release checks pending
This draft describes the intended privacy policy for the account-enabled service. Before publication, verify provider agreements, processing regions and transfer safeguards, that PostHog discards raw IP addresses before storage, that provider backups and logs are retained for no more than 30 days, and that analytics data is retained for no more than 12 months. Also verify that expired content is no longer shown through the application at its retention cutoff and is physically scrubbed by a daily cleanup job; direct database access may still find the row until that job runs. These are targets, not confirmation of current settings. The legitimate-interest balancing assessment and process for handling objections will be documented before publication. Publish the notice only after release checks confirm that the practices are in place.
Controller and contact details
The data controller is Sales Squad Oy (Business ID 3582864-1), Visamäki 5, 02130 Espoo, Finland.
For privacy matters, contact hello@ailicenses.ai. No data protection officer has been appointed.
Information we process
You can read public guides without an account. An account lets you save learning progress and use the AI coach.
We process account credentials such as your email address and password information in protected form, along with technical information about account creation and sign-in. Learning information includes progress, skill status and card state. We also process coach conversation messages, review questions, answers and explanations generated by the coach, usage-limit counters, the time and policy version of your affirmative 18+ coach confirmation, and your forum profile, published content, votes, reports you submit or that concern your account, possible participation restrictions and moderation information. We do not ask for your date of birth.
Practice answers you author in the browser remain in the browser tab, where you can clear them. They are not sent to the server or analytics.
If you consent to analytics, PostHog receives the page path without a search query, the time, a random browser identifier, technical browser, device and viewport information, and the origin of the referring site. A predefined limited source identifier and named learning events may also be sent, such as opening a learning path or step, viewing a guide, copying a prompt, starting an exercise and the number of search results; events contain content identifiers only. Analytics does not receive search queries, form field contents, text you write or the content of coach, forum or review answers, and the service does not use session replay. PostHog technically processes the IP address to receive an event, but the raw IP address must be discarded before storage; this will be verified before publication.
Why we process information
We process account and learning information to provide the service you requested: identify you, save and show your progress, and provide the coach and review functions you request. This processing is necessary to perform our contract with you.
We process usage-limit and safety information to protect the service, prevent misuse and maintain community safety. The basis is the controller’s legitimate interest. You may object to processing on this basis by contacting us; we will assess your request and its effects.
Optional PostHog analytics is based on your consent. You can refuse or withdraw consent at any time using Privacy settings in the page footer; your choice does not restrict core account functions. Withdrawal stops future analytics collection and disables the PostHog identifier. The denied choice remains in your browser so we do not ask again; it is not linked to your identity. The identifier and choice are stored in local storage, not in a cookie, and you can change your choice or clear your browser data.
We also process information when necessary to meet a legal obligation. We do not send unsolicited marketing messages.
Service providers and data transfers
Supabase provides account and database services, and Vercel provides website hosting. PostHog’s EU service is used for limited analytics only with your consent. Cloudflare maintains domain DNS and forwards messages sent to hello@ailicenses.ai to the existing Google Gmail inbox. Providers process information to deliver the service.
The AI coach uses Groq’s model service, which processes data in the United States. Your confirmed conversation and the learning context needed for a response are sent to Groq only when you choose to send a message. Your email address and account identifier are not sent to the coach. If Groq is unavailable, the coach displays an error; your message is not silently routed to Gemini, OpenRouter or another model service.
Groq processing transfers information outside the EU and EEA. This draft does not claim that transfer safeguards, agreements or all processing regions have been verified. Their current status will be checked before publication. We do not sell personal data or use it for advertising.
How long we retain information
The content of coach conversations is no longer shown in the application 30 days after each message is created. Physical deletion takes place in a daily cleanup job, so it does not occur at the exact expiry time. Minimal conversation request identifiers and status information are kept until account deletion to prevent incorrect duplicate processing of the same request.
Coach-generated review questions, answers and explanations are no longer shown in the application 12 months after creation; physical deletion takes place in a daily cleanup job. Related numeric progress and card state are kept until account deletion. Account credentials and private learning progress are kept until account deletion.
When an account is deleted, the bodies of forum posts you authored and the titles and slugs of discussions you started are removed. Structural placeholders and other users’ replies may remain so the discussion structure is preserved. Quotations of your content written by other users may remain; contact us if a quotation contains personal information about you.
Free-text content in resolved reports and moderation actions is scrubbed 90 days after case closure. Account deletion also removes moderation action notes you authored or that directly target the deleted account; reports made by other people are not removed solely because an account is deleted. Structured report and restriction identifiers, target references, reasons, statuses, timestamps and other referential data may remain as needed to handle a case, restriction or account lifecycle. Direct moderation action identifiers are minimized 12 months after case closure if there is no active case or restriction. Indirect references are not anonymized. These periods do not guarantee complete deletion of all information within 12 months. Statutory requests are assessed case by case, retaining only limited necessary records.
The target maximum retention period for provider backups and access, diagnostic and other logs is 30 days, and for analytics data 12 months. These periods will be verified before publication.
Your rights
Under applicable data protection law, you can request access to your information, its correction or deletion, restriction of processing, and data portability. You may object to processing based on legitimate interests. You can withdraw consent at any time; withdrawal does not affect the lawfulness of processing before it.
You can download your data and request account deletion from the My account page. Account deletion follows the retention and forum exceptions described in this notice. You can withdraw analytics consent at any time using Privacy settings in the page footer. Withdrawal stops future collection and disables the PostHog identifier, but the denied choice remains in your browser so we do not ask again; it is not linked to your identity.
Send privacy rights requests to hello@ailicenses.ai. We will respond within one month. For complex or multiple requests, the deadline may be extended as permitted by law; we will explain the extension and reasons within one month. We may ask for information needed to verify your identity.
You can lodge a complaint with the Office of the Data Protection Ombudsman at tietosuoja.fi.
Minors and automated decisions
The AI coach is intended for people aged 18 or older. Before using it, the user personally confirms that they are at least 18. This is a self-declaration, not age or identity verification.
We do not make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you. Coach responses may be wrong or incomplete; check important information against original sources.
Changes to this notice
We update this notice when the service or its processing of personal data changes. We will communicate material changes as required by applicable law. The latest version and update date appear on this page.