Privacy Policy

This Privacy Policy describes how M&D AI Academy, LLC (“MDAI Academy,” “we,” “us”) collects, uses, shares, and protects personal information when you use the MDAI Lesson Planner at lp.mdai.academy and related academy services (the “Service”). The public marketing site at mdai.academy is a separate property; this policy governs the lesson planner, catalog, checkout, classroom, and staff tools.

Questions: info@mdai.academy or 713-587-2515 (Texas, USA).

1. Who is responsible

M&D AI Academy, LLC is the controller of personal information processed for the Service. We are an education company based in Texas, United States. We are not a children’s product. FutureTranz may appear on internal operator desks only; it is not the public storefront brand.

2. Information we collect

Account and identity

When you sign in we receive the identifiers needed to create and keep your account. Sign-in is federated through a Grok / xAI authentication broker. Upstream providers currently offered are Google and X. Email-and-password accounts may also be enabled. Depending on the method, that typically includes name, email address, a stable provider subject identifier, and a profile image URL if the provider sends one. We do not receive your Google or X password.

Payments

Paid catalog checkouts and Pro / Academy subscriptions are processed by Stripe when Stripe is configured. We receive payment status, Stripe customer and checkout session identifiers, plan or SKU, amount, and currency. We do not store full payment card numbers, CVC, or magnetic stripe data. Stripe’s privacy policy applies to card data Stripe processes.

Enrollments, cart, and plans

• Signed-in cart and purchases stored in our application database.
• Guest cart in browser storage under the key mdai-guest-cart-v1 (class slug, title, price).
• Local lesson-plan drafts under mdai-lesson-plans-v1 on your device until you save them to a signed-in account workflow.
• Progress on enrolled classes, generated course records, and staff assignments.

Catalog and operations

Class catalog records are synchronized from our Notion YouTube Learning Database for staff operations. That replica includes class titles, slugs, sources, and publication status. It is not a student directory. Staff notifications (approvals, queue events) record actor identifiers and class slugs so operators can do their jobs.

Technical data

We and our host (Cloudflare) process IP address, user agent, timestamps, and security logs as part of delivering HTTPS, rate limiting, and abuse prevention. The Service may be installed as a progressive web app; the browser may then store a manifest, icons, and an offline cache.

We do not run Google Analytics on the lesson planner storefront.

3. How we use information

• Create and authenticate your account, and keep you signed in.
• Provide catalog browsing, planner, enrollments, and classroom features you request.
• Process payments, fulfill purchases, and manage subscriptions.
• Operate admin approval, teacher, finance, and Notion sync tools for authorized staff.
• Secure the Service, prevent fraud, and debug failures.
• Send operational messages (receipts, enrollment, security) — not marketing blasts unless you opt in separately.
• Comply with law and enforce the Terms of Use.

We do not sell personal information and we do not share it for cross-context behavioral advertising.

4. Legal bases (EEA / UK visitors)

Where GDPR or UK GDPR applies, we process information on these bases:

• Contract — to provide the Service you signed up for (account, paid classes, subscriptions).
• Legitimate interests — security, fraud prevention, product reliability, and staff operations, balanced against your rights.
• Consent — optional email/password where offered, and any non-essential storage you control in the browser.
• Legal obligation — tax, accounting, and lawful requests.

5. Who we share with

We may disclose information if required by law, to protect rights and safety, or to a successor in a merger or asset transfer, with notice where the law requires it.

6. Cookies and local storage

You can clear site data in your browser. Clearing it signs you out and drops guest cart and local drafts. Session cookies are required to use a signed-in account.

7. Retention

• Account and enrollment records: for the life of the account, then deleted or de-identified when you use Delete my data on Account, or within a reasonable period after closure, unless law requires longer (for example, tax records of paid transactions).
• Stripe records: retained by Stripe under its policy; we keep fulfillment identifiers needed to honor purchases.
• Guest cart and local drafts: until you clear them or the browser evicts them.
• Security logs: short operational windows unless an incident requires longer hold.

8. Your rights

You may request access, correction, or deletion of your account data, and a copy of data you provided. Signed-in users can exercise the right to erasure (GDPR Article 17 / “delete my data”) from Account → Data export, using the trash-can control. That request is fulfilled without undue delay from the live application: we delete the account, profile, sessions, cart, local drafts, and progress. Paid transaction facts (class, amount, date) are kept in de-identified form where tax, accounting, or legal claims require it (Article 17(3)(b) and (e)). You may also email info@mdai.academy from the address on the account. We verify identity (a signed-in session plus confirmation of the account email) and respond within one month, or sooner when the in-product control completes immediately.

California / state privacy laws. We do not sell or share personal information as those terms are used in the CCPA/CPRA. You may request to know, delete, or correct personal information. We will not discriminate against you for exercising those rights. Authorized agents may submit requests with proof of authority.

EEA / UK. You may object to or restrict certain processing, and you may lodge a complaint with your local supervisory authority. We do not currently appoint a separate EU representative; contact us at the addresses above.

9. Children

The Service is built for working professionals. It is not directed at children under 13, and we do not knowingly collect personal information from them. You must be at least 18 to create an account and to complete a paid transaction. If we learn we collected information from a child under 13, we will delete it.

10. International transfers

We operate in the United States. If you access the Service from another country, your information is processed in the U.S. and in the countries where our processors (Google, X, Stripe, Notion, Cloudflare, xAI) operate. Those transfers are necessary to provide the Service you request.

11. Security

We transmit the Service over HTTPS, keep session cookies on this origin, store passwords only as hashes when email sign-in is enabled, and never store raw card numbers. No method of transmission or storage is perfectly secure. Report vulnerabilities privately to info@mdai.academy — do not post exploits in public issues.

12. Changes

We will post updates on this page and change the effective date. Material changes that affect your rights will be highlighted in the product or sent to the email on the account when we have one.

13. Contact

M&D AI Academy, LLC
Texas, United States
713-587-2515
info@mdai.academy

See also: Privacy Policy · Legal Notice · Terms of Use · Compliance.