Privacy Notice

AIVAST Academy is operated by AIVAST LLC ("AIVAST", "we", "us"). For the personal data described here, AIVAST LLC acts as the data controller. Contact: privacy@aivast.com.

Account data (name, email, role, school affiliation if applicable, login credentials). Learning data (course progress, quiz attempts, assignment submissions, certificates). Support data (messages you send us). Technical data (device identifiers, IP address, browser type, usage/telemetry). Optional profile data (avatar, parent/guardian contact for accounts under 13).

To create and operate your account and deliver courses (performance of contract). To issue certificates and verify them publicly (performance of contract). To keep the platform secure and prevent fraud or abuse (legitimate interests). To support parents and schools (performance of contract / legitimate interests). To improve the product and our content (legitimate interests). To send service notices and, where you've opted in, occasional product updates (consent for marketing). To comply with legal obligations (legal obligation).

Service providers that help us run AIVAST: hosting and database infrastructure, email delivery, analytics, and customer support tooling. Paddle.com Market Ltd, our Merchant of Record, who receives the personal data needed to process payments, manage subscriptions, calculate tax, and issue invoices for purchases. Schools and parents who are linked to a student account, limited to that student's progress and submissions. Professional advisers (legal, accounting) where needed. Authorities where required by law. We do not sell personal data and we do not share student data for advertising.

We and our service providers may process data outside your country of residence, including in the United States and the European Economic Area. Where required, transfers are protected by Standard Contractual Clauses or an equivalent safeguard.

We keep account and learning data for as long as your account is active and for a reasonable period afterwards to support certificate verification, recover from disputes, and comply with legal obligations. Support messages are retained for up to 3 years. Payment records held by Paddle follow Paddle's own retention schedule. When data is no longer needed we delete or anonymise it.

Subject to local law, you can request access to your data, rectification of inaccurate data, erasure, restriction of processing, data portability, and you can object to processing or withdraw consent at any time. To exercise any of these rights, email privacy@aivast.com. We aim to respond within 30 days. If you're in the UK or EEA, you also have the right to lodge a complaint with your local data protection authority.

We require verifiable parental consent before activating any account for a user under 13. Parents can review their child's data, request changes or deletion, and revoke consent at any time by emailing privacy@aivast.com.

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and least-privilege role-based access for our team.

We use essential cookies to keep you signed in and to remember preferences. We use a small amount of analytics tooling to understand product usage and improve courses. You can manage cookie preferences in your browser; disabling essential cookies will break login.

We'll notify families and schools when this notice changes in a material way. The current version is always available on this page.