Who we are
This website and the Build My AI Ads Video course are run by Build My AI Freedom ("we", "us", "our"). We decide how and why your personal data is used. That makes us the data controller under the EU and UK General Data Protection Regulation (GDPR) and the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
You can reach us about anything in this policy at [email protected].
What we collect and why
Each card below lists the data, why we use it, the legal basis that allows it and how long we keep it.
When you buy the course
- Data
- Name, email address, phone number, billing location, amount paid, transaction ID and payment status. You enter card, UPI or bank details directly on our payment partner's checkout. We don't receive or store them.
- Why
- To process your payment, give you course access, send your receipt and access email, prevent fraud and keep tax and accounting records.
- Legal basis
- Performing our contract with you. Meeting our legal obligations for financial records. Under the DPDP Act: you gave the data voluntarily for this purpose.
- Kept for
- As long as tax and accounting laws require, generally up to 8 years.
Your community and course account
- Data
- Name, email, login details (managed by the platform), profile details you choose to add, course progress, and the posts and comments you share.
- Why
- To host the course, remember your progress and run the community.
- Legal basis
- Performing our contract with you.
- Kept for
- While your account is open. When you ask us to close it, we delete or anonymise your data within 90 days, unless the law requires us to keep it.
When you contact support
- Data
- Your name, email address and whatever you include in your message, such as screenshots or receipts.
- Why
- To answer your question, fix access problems and resolve payment issues.
- Legal basis
- Performing our contract with you, and our legitimate interest in giving good support.
- Kept for
- Up to 24 months after the conversation ends.
Emails we send you
- Data
- Name and email address.
- Why
- Service emails about your purchase and access, such as receipts, login help and important course changes. Marketing emails about new courses and offers, only if you agree.
- Legal basis
- Service emails: performing our contract. Marketing emails: your consent, which you can withdraw at any time.
- Kept for
- Service emails: while you have access. Marketing: until you unsubscribe, using the link in any email or by writing to us.
When you visit this website
- Data
- Technical data your browser sends automatically: IP address, browser and device type, the page requested and the time.
- Why
- To deliver the pages, fonts and preview video, and to keep the site secure. This data is handled by our hosting provider and the third-party services listed in section 4.
- Legal basis
- Our legitimate interest in running a working, secure website.
- Kept for
- Short-term server logs, kept under each provider's own policy. We don't use this data to build profiles of visitors.
We don't ask for sensitive data, such as health, religion or biometric data, and we don't use your data for automated decisions that significantly affect you.
How we ask for consent
Next to every "Get Course Access" button on our sales page, we show this notice before you go to checkout:
"By clicking Get Course Access, you agree to our Terms & Conditions and Refund Policy and confirm you've read our Privacy Policy. We use your details only to process your payment and deliver the course. You get instant access to digital content, so all sales are final and you give up any right to cancel once access starts."
Consent to marketing emails is always separate and optional. Saying no doesn't affect your access to the course.
Where we rely on your consent, you can withdraw it at any time, as easily as you gave it: use the unsubscribe link or email us. Withdrawing doesn't affect anything we did before. If you withdraw consent we need to provide a service, we may no longer be able to provide it.
You can ask to read this notice in English or in any language listed in the Eighth Schedule to the Constitution of India. Just email us.
International transfers
Some of our providers store or process data outside your country, including outside India and the European Economic Area. When data about people in the EU, EEA or UK leaves those regions, we rely on legal safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions. We don't transfer data to any country the Government of India restricts under the DPDP Act.
How long we keep data
We keep personal data only as long as we need it for the purposes in section 2, or as long as the law requires. The "Kept for" line on each card gives the period. After that, we delete the data or anonymise it so it no longer identifies you.
How we protect data
We use reasonable technical and organisational safeguards. These include encrypted connections (HTTPS), payment handling by a regulated payment partner, access limited to people who need it, and providers with strong security practices. No system is perfectly secure. If a personal data breach happens, we'll notify affected people and the relevant regulators as the law requires, including the Data Protection Board of India and, where the GDPR applies, the supervisory authority within 72 hours.
Your rights (EU, EEA and UK)
If the GDPR or UK GDPR applies to you, you have the right to:
- access your personal data and get a copy;
- correct data that's wrong or incomplete;
- erase your data ("right to be forgotten");
- restrict how we use your data;
- data portability: receive your data in a commonly used format, or have it sent to another provider;
- object to processing based on legitimate interests, and to direct marketing at any time;
- withdraw consent at any time, where we rely on consent;
- complain to your local data protection authority.
Your rights (India)
Under the DPDP Act, as a Data Principal you have the right to:
- access information: a summary of the personal data we process and how, and who we've shared it with;
- correction, completion, updating and erasure of your personal data;
- withdraw consent at any time, as easily as you gave it;
- grievance redressal: a quick response from us to any complaint;
- nominate another person to exercise your rights if you die or become unable to do so.
You also have a duty, under the Act, to give accurate information and not to file false or frivolous complaints.
How to use your rights
Email [email protected] with the subject line "Privacy request". Tell us what you'd like us to do. To protect your data, we may ask you to confirm your identity, usually by replying from the email address you used to buy.
It's free. We'll reply within 30 days. If a request is complex and the law allows more time, we'll tell you why and when to expect an answer.
We'll honour these requests wherever we reasonably can, even if you live outside India, the EU and the UK.
Complaints
Please contact us first. We'll try to resolve your concern quickly. If you're not satisfied with our response:
- India: you can complain to the Data Protection Board of India, after using our grievance process.
- EU and EEA: you can complain to the data protection authority in the country where you live or work, or where the problem happened.
- UK: you can complain to the Information Commissioner's Office (ICO).
Children
The course is for adults aged 18 and over. We don't knowingly collect personal data from anyone under 18. If you believe a child has given us their data, email us and we'll delete it.
Changes to this policy
We may update this policy when our services or the law change. We'll post the new version here with a new "Last updated" date. If a change materially affects how we use your data, we'll tell you by email, and we'll ask for fresh consent where the law requires it.
Contact and Grievance Officer
For privacy questions, requests and complaints, contact our Grievance Officer at [email protected]. Please use the subject line "Privacy request" or "Grievance" so we can prioritise it.