Privacy Notice

1. Who we are

AI Student Factory is operated by Erfan Kianoush Khoshnazar, an individual sole proprietor (the "data controller"). This notice explains what personal data we collect, why, and the rights you have over it.

2. Data we collect

• Account data: name, email address, login credentials.
• Quiz and product data: answers you provide, AI-generated business ideas tied to your account, saved goals, journal entries, and other content you create.
• Support communications: messages you send us via email, forms, or chat.
• Usage and telemetry: pages viewed, features used, error logs.
• Device data: browser type, operating system, device identifiers, IP address.
• Marketing preferences: email subscription status and preferences.

Payment card details are collected and processed by our reseller Paddle.com — we do not see or store your full card number.

3. Why we use it

• To create your account and provide the Service (legal basis: contract).
• To generate personalized AI recommendations (legal basis: contract).
• To provide customer support (legal basis: contract / legitimate interest).
• To detect and prevent fraud, abuse, and security incidents (legal basis: legitimate interest).
• To improve the Service via aggregated analytics (legal basis: legitimate interest).
• To send service emails (legal basis: contract) and marketing emails where you have opted in (legal basis: consent).
• To comply with legal obligations such as tax and accounting (legal basis: legal obligation).

4. Who we share it with

• Merchant of Record (Paddle.com): for sale of the product, subscription management, payments, tax compliance, invoicing, and refund handling.
• Hosting and infrastructure providers: for running the application, database, and email delivery.
• Analytics providers: for product analytics and crash reporting.
• AI providers: we send your quiz answers and prompts to AI model providers solely to generate your personalized output.
• Professional advisers: legal, accounting, or tax advisers, where needed.
• Authorities: when required by law, regulation, or valid legal process.

We do not sell your personal data.

5. International transfers

Some of our service providers are located outside your country of residence, including outside the UK and EEA. Where required, we rely on adequacy decisions or Standard Contractual Clauses to safeguard your data during international transfers.

6. Retention

We keep your personal data for as long as you have an active account and for a reasonable period afterward to comply with legal, accounting, and reporting requirements. When data is no longer needed, we delete or anonymize it.

7. Your rights

Depending on your country of residence, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Request erasure ("right to be forgotten");
• Restrict or object to certain processing;
• Receive a portable copy of your data;
• Withdraw consent at any time, where processing is based on consent;
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us via the website. We will respond within one month of receiving your request.

8. Security

We use appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and regular review of our providers. No system is perfectly secure, so we cannot guarantee absolute security.

9. Cookies

We use a small number of essential cookies (for login and language preference) and limited analytics cookies to understand how the Service is used. You can manage or disable cookies in your browser settings.

10. Children

The Service is not directed to children under 16 and we do not knowingly collect personal data from them.

11. Changes

We may update this Privacy Notice from time to time. Material changes will be announced through the Service or by email.

12. Contact

Questions about this Privacy Notice or your personal data? Contact us via the website or at the email address listed on aistudentfactory.com.