Privacy Policy

1. Who is responsible for your information

Applied AI is the controller of the personal information described in this policy. If you have a privacy question or want to exercise a privacy right, email matt@matt-penny.com.

2. Information we collect

Depending on how you use the site, we may collect:

• Contact and profile information: your name, email address, business name, and other details you provide.
• Enquiry and form information: messages, project requirements, budget range, assessment answers, and preferences.
• Account information: account identifiers, authentication information, course access, and password reset activity. Passwords are handled by our authentication provider and are not visible to us in plain text.
• Purchase information: products or subscriptions purchased, payment status, transaction identifiers, and attribution data. Payment card details are provided directly to Stripe and we do not receive full card numbers.
• Marketing information: mailing-list subscriptions, email engagement, source or referral codes, and communication preferences.
• Usage and device information: IP address, browser and device type, pages viewed, links clicked, approximate location, referring page, timestamps, error information, and cookie or similar identifiers.
• AI chat information: prompts, messages, responses, a device identifier stored in your browser, and technical information needed to operate the chat.

Please do not submit sensitive personal information, confidential business information, or information about another person unless it is necessary and you are authorised to do so.

3. How and why we use information

Where we rely on consent, you may withdraw it at any time. This will not affect processing that took place before withdrawal. Where we rely on legitimate interests, we balance those interests against your rights and expectations.

4. Cookies and similar technology

We use essential cookies for secure sign-in and restricted content. We also use cookies, local storage, and similar identifiers for analytics, error monitoring, referral attribution, and the AI chat device identifier. Google Analytics, PostHog, embedded YouTube content, and other providers may also set or read identifiers when their features load.

You can remove or block cookies through your browser settings. Blocking essential storage may prevent sign-in or other features from working. You can also use the Google Analytics opt-out tool.

5. International transfers

Some providers operate in, or transfer information to, countries outside the country where you live. Where data protection law requires it, we rely on an adequacy decision, approved contractual protections such as standard contractual clauses, or another lawful transfer mechanism. Contact us if you would like more information about the safeguards relevant to your information.

6. Your choices and rights

Depending on where you live and the circumstances, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information, and to object to certain processing. You may withdraw consent at any time. You have an unconditional right to object to direct marketing.

You can unsubscribe from marketing emails using the link in any marketing message. To make another request, email matt@matt-penny.com. We may need to verify your identity before completing a request.

You may also complain to the data protection authority where you live or work. People in the UK can contact the Information Commissioner's Office. People in the EEA can find their authority through the European Data Protection Board.

We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.

7. Security

We use reasonable technical and organisational measures designed to protect personal information. No internet service is completely secure, so please use a strong, unique password and avoid sending sensitive or confidential information through open forms or the AI chat.

8. Children

Our services are intended for adults and are not directed to children under 16. If you believe a child has provided personal information to us, please contact us so we can investigate and delete it where appropriate.

9. Changes to this policy

We may update this policy as our services or legal obligations change. We will post the revised version here and update the date above. If a change materially affects how we use information, we will provide additional notice where appropriate.