Compliance

M&D AI Academy, LLC publishes this page so students, purchasers, and enterprise evaluators can see how the MDAI Lesson Planner is run. It describes practices in production on lp.mdai.academy. It is not a SOC 2 report, ISO certificate, HIPAA BA, or PCI attestation.

1. Organization

• Legal entity: M&D AI Academy, LLC (Texas, United States).
• Product: MDAI Lesson Planner — catalog, planner, checkout, classroom, staff tools.
• Contact: 713-587-2515 · info@mdai.academy.
• Audience: working professionals and organizations. Not directed at children.

2. Privacy and consumer laws

We honor the rights described in the Privacy Policy: access, correction, deletion, and a copy of data you provided, via info@mdai.academy.

• GDPR / UK GDPR. If those laws apply to you, we process account and purchase data to perform the contract and run a secure service. We do not currently maintain a separate EU representative. You may complain to your supervisory authority.
• CCPA / CPRA and similar U.S. state laws. We do not sell personal information and we do not share it for cross-context behavioral advertising. California residents may submit know / delete / correct requests.
• COPPA. The Service is not directed at children under 13. Accounts and payments require age 18.

3. Payments (PCI)

Card payments, when enabled, are handled by Stripe Checkout. The lesson planner does not store PAN, CVC, or track data. Stripe is a PCI DSS Level 1 service provider. Our PCI scope is limited to redirecting you to Stripe and recording fulfillment identifiers Stripe returns. Local (non-Stripe) checkout is used only when Stripe is not configured or the amount is zero.

Current paid offers: Pro Instructor USD $29 / month; Academy USD $99 / month; plus a la carte catalog prices shown at checkout. Cancellation and refunds are in the Terms of Use.

4. Accessibility

The product target is WCAG 2.2 Level AA for the student-facing storefront (catalog, plans, planner, classroom, legal pages). We use semantic HTML, labeled controls, keyboard-operable navigation, and visible focus. Known gaps should be reported to info@mdai.academy with the URL and what assistive technology you use. We will treat that as a defect, not a support argument.

5. Security

• TLS on lp.mdai.academy (Cloudflare).
• Session cookies scoped to this origin (Better Auth).
• OAuth client secrets for Google/X held by the auth broker, not in the browser.
• Staff routes gated by role (admin / teacher / superadmin).
• Webhook endpoint for Stripe fulfillment.
• Vulnerability reports: email info@mdai.academy. Do not file public issues with exploit details.

We are not claiming SOC 2 Type II, ISO 27001, FedRAMP, or HIPAA. Do not put electronic protected health information, government classified data, or cardholder data into planner prompts.

6. Education and IP

Classes cite sources. Catalog inclusion is not accreditation and is not a degree. DMCA notices follow the Legal Notice. Repeat infringers lose access.

7. International users

Hosting and primary processing are in the United States. Using the Service from another country is your choice to transfer the data needed to run your account and purchases to the U.S. and to the processors named in the Privacy Policy.

8. Updates

When controls change (new payment processor, new sign-in provider, new host), we will update this page and the Privacy Policy on the same effective-date cycle.

See also: Privacy Policy · Legal Notice · Terms of Use · Compliance.