Privacy Policy

Effective Date: January 3, 2026
Version: 1.0.0
Website: https://ai4businessleaders.com
Support: support@corsacourses.com
Controller/Operator: Corsa Courses LLC (New Jersey)
Mailing Address: 573 Valley Road Suite 3, Wayne, NJ 07470

1. Overview

This Privacy Policy explains how Corsa Courses LLC ("we," "us," or "our") collects, uses, discloses, and safeguards information when you visit or use https://ai4businessleaders.com and the related services we provide (the "Service").

If you do not agree with this Privacy Policy, do not use the Service.

2. Information We Collect

2.1 Information You Provide

We may collect:

• email address (required for account access)
• name (optional, used for certificates and personalization)
• course progress data (lesson and module completion)
• Prompt Notebook entries and notes (user-created content)
• support requests and correspondence
• legal consent records (Terms version, timestamp, IP address)

2.2 Information Collected Automatically

We may collect:

• IP address (security, fraud prevention, approximate geo)
• device and browser information (for example, User-Agent)
• page views and funnel events stored as first-party events in our database
• attribution data (for example, gclid and UTM parameters)
• anonymous visitor ID (for example, a UUID stored in a cookie)
• session identifiers and internal traffic flags

2.3 Information We Do Not Intend to Collect

We do not intend to collect:

• full payment card numbers (processed by Stripe)
• sensitive categories (health data, race, religion, etc.)

Do not submit sensitive personal information into the Service or into any AI tutor.

3. Cookies and Similar Technologies

We use cookies and similar technologies for essential authentication, security, and analytics.

Cookies may include:

• authentication session cookies
• anonymous visitor and analytics identifiers
• attribution storage cookies (UTM and gclid)
• internal or test traffic flags
• A/B testing assignment cookies

You may be able to control cookies through your browser settings. If you disable cookies, some functionality may not work.

4. How We Use Information

We may use information to:

• provide and operate the Service and Course
• authenticate users and secure accounts
• process purchases and manage entitlements
• deliver transactional emails and service notices
• track progress, generate certificates, and verify credentials
• provide support and respond to inquiries
• detect fraud, abuse, and security incidents
• improve the Service, including product analytics and debugging
• measure marketing performance and attribution
• comply with legal obligations and enforce our Terms

5. Legal Bases (EEA/UK Users)

If you are in the EEA, Switzerland, or the UK, we process personal data under one or more legal bases, including:

• performance of a contract (providing the Course and Service)
• legitimate interests (security, fraud prevention, service improvement, analytics)
• consent (where required for certain cookies or marketing)
• legal obligations (tax, accounting, compliance)

COURSE PROGRESSION TRACKING (LAWFUL BASIS). We track your progression through the course, including lesson completions and timestamps. For users in jurisdictions requiring a stated lawful basis, this telemetry is processed strictly under Contractual Necessity (Article 6(1)(b) of the GDPR). This data is structurally required for us to fulfill the conditional requirements of our Refund Policy and enforce our single-user license.

6. Sharing and Disclosure

We may share information with service providers and third parties that help us operate the Service, such as:

• payment processors (for example, Stripe)
• hosting and infrastructure providers (for example, Vercel)
• database and authentication providers (for example, Supabase)
• email providers (for example, Resend)
• error monitoring (for example, Sentry)
• product analytics (for example, PostHog)
• advertising and conversion measurement (for example, Google Ads)

We may also disclose information:

• to comply with law, subpoena, or legal process
• to protect rights, safety, and security
• to investigate fraud or abuse
• in connection with a business transfer (merger, acquisition, asset sale)

7. Third-Party Services and Links

The Service may reference or integrate with Third-Party Services.

7.1 Payments

Payments are processed by Stripe. Their privacy practices are governed by their policies.

7.2 AI Course Tutor

The AI Course Tutor™ experience is hosted on a third-party platform (for example, OpenAI's ChatGPT). We do not control that platform. We do not receive or store the AI tutor chat logs as part of the Service unless you separately submit them to us (for example, via support).

THIRD-PARTY AI DATA PROCESSING. Text submitted to the AI Course Tutor™ or Prompt Notebook is transmitted to OpenAI via API. We do not control OpenAI's server logs, retention, or training data policies. By using the AI features, you acknowledge this transmission. Do not submit sensitive personal or corporate data.

Your use of Third-Party AI Services is governed by their terms and privacy policies.

7.3 Social Platforms and Community

If community access is offered through social platforms, those platforms handle data under their own policies.

8. Advertising and Analytics

We use analytics and advertising tools to understand performance and improve the Service.

Where required by law, we will request consent for non-essential cookies and tracking technologies.

We do not knowingly sell personal information in exchange for money. We do not knowingly share personal information for cross-context behavioral advertising in a manner that would be considered a "sale" under certain state privacy laws, except as permitted by law and subject to your rights.

9. Public Certificate Verification

PUBLIC CERTIFICATE VERIFICATION. Generating a Certificate of Completion is optional. By affirmatively clicking to generate or claim a Certificate, you provide explicit consent for Corsa Courses LLC to publish your name, completion status, and issuance date on a unique, publicly accessible verification URL. You may withdraw this consent at any time by contacting support@corsacourses.com to have the public record destroyed.

10. Data Retention

We retain data as follows:

• account data: retained while your account is active
• purchase and entitlement records: retained as necessary for legal and accounting purposes
• analytics events: may be retained long-term, generally without direct identifiers
• session records: typically expire after a limited period
• magic link tokens: single-use and expire quickly

We may retain information longer if required by law, to resolve disputes, enforce agreements, or for legitimate interests like fraud prevention.

11. International Transfers

We may process and store information in the United States and other countries where our service providers operate.

For EEA/UK users, where required, we rely on lawful transfer mechanisms (for example, standard contractual clauses) and appropriate safeguards.

12. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. However, no system is perfectly secure, and we cannot guarantee absolute security.

13. Your Rights and Choices

Depending on your location, you may have rights to:

• access your data
• correct inaccurate data
• delete your data (subject to exceptions)
• object to or restrict processing
• data portability
• withdraw consent where processing is based on consent
• lodge a complaint with a supervisory authority (EEA/UK)

To exercise rights, contact support@corsacourses.com. We may verify your identity before fulfilling a request.

14. U.S. State Privacy Notices (Including California)

If you are a resident of certain U.S. states (including California), you may have additional rights.

Where applicable, you may have the right to:

• know what personal information we collect and why
• access specific pieces of personal information
• delete personal information (with exceptions)
• correct inaccurate personal information
• opt out of certain sharing or targeted advertising where required by law
• not be discriminated against for exercising privacy rights

We do not knowingly sell personal information for money. If our use of certain advertising or analytics services is deemed a "sale" or "sharing" under applicable law, you may request to opt out by contacting support@corsacourses.com and we will make commercially reasonable efforts to honor your request consistent with technical feasibility and legal requirements.

15. Children's Privacy and Age Restriction

AGE RESTRICTION. The Service is intended strictly for business professionals and adults over the age of 18. We do not knowingly collect personal data from minors. If we become aware we have inadvertently collected data from a minor, we will delete it immediately.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will update the Effective Date and Version at the top. Continued use of the Service after changes become effective means you accept the updated policy.

17. Contact

For privacy questions or requests, contact support@corsacourses.com.