Privacy Policy

1. Who is responsible for your data

Yeiran Camilo Múnera Rodríguez, trading as Cortex AI Academy, is the data controller for the personal data described in this notice. Contact: munerayeiran@gmail.com, registered address Carrera 37 #63-67.

2. Categories of personal data we collect

• Account information: name, email address, password credentials managed by our authentication provider, and an optional profile photo you choose to upload.
• Purchase information: the products you buy, amount, currency, payment status, and the transaction and customer identifiers returned by our payment provider. We do not receive or store your full card number.
• Course activity: your enrolments and access tier, which lessons and materials you open, and completion or certificate data generated by the platform.
• Technical data: data processed automatically by our hosting and authentication providers to deliver and secure the site, such as IP address and session information.

3. How we use your data

• To create and manage your account and authenticate your logins.
• To process purchases, confirm payments and grant or remove access to the products you bought.
• To deliver course content, materials and certificates.
• To respond to support requests and handle refund requests.
• To protect the platform against fraud, abuse and unauthorised content sharing, and to comply with legal and tax obligations.

We process this data to perform our contract with you, to comply with legal obligations, and for our legitimate interest in operating and securing the platform.

4. Authentication

Accounts and sign-in sessions are managed by our authentication and database provider on our behalf. Session information is stored in your browser so you stay signed in. We do not have access to your plain-text password.

5. Payment processing

Payments are processed by Paddle.com Market Limited, which acts as our reseller and Merchant of Record. When you buy from us, Paddle collects the payment and billing information required to complete the transaction, calculate tax and issue invoices, and shares transaction details with us so we can confirm your purchase and grant access. Paddle processes your data in accordance with its own privacy policy.

6. Cookies and similar technologies

We use only the storage strictly necessary to operate the site: session and authentication storage that keeps you signed in, a stored language preference, and cookies set by the Paddle checkout when you make a purchase. We do not currently use advertising cookies or third-party analytics or tracking tools on this site. If that changes, we will update this policy.

7. Third-party service providers

• Paddle.com Market Limited — payment processing, billing, tax and invoicing (Merchant of Record).
• Our cloud hosting, database, authentication and file storage provider — running the platform and storing account data, course files, videos and uploaded profile photos.

These providers process personal data on our instructions, except Paddle, which also acts as a controller for the payment transaction.

8. Data security

Access to course materials, videos and prompt library files requires authentication and a confirmed purchase, and files are served through expiring private links. Access permissions are enforced at database level, and administrative functions are restricted to authorised accounts.

9. Data retention

We keep account and enrolment data for as long as your account exists, so you retain access to what you purchased. Payment and transaction records are kept for the period required by accounting and tax law. If you ask us to delete your account, we delete or anonymise your data except where we must retain it by law.

10. International data transfers

We serve students in Latin America and internationally, and our providers may process data outside your country of residence. Where data is transferred internationally, our providers rely on appropriate safeguards such as the European Commission's standard contractual clauses.

11. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority. To exercise these rights, contact us at munerayeiran@gmail.com. For data held by Paddle in relation to a payment, you can also contact Paddle directly.

12. Children's privacy

The platform is intended for adults. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will remove it.

13. Updates to this policy

We may update this policy as the platform evolves. The current version is always published on this page with its "Last updated" date.