Privacy Policy

What we collect

• Account data handled by our authentication provider: your name, email, and sign-in identifiers.
• Learning data: your progress, assessment scores, scenario responses, reactions, and tutor conversations, so we can show progress and adapt content.
• Payment data: processed by our payment provider. We do not store full card numbers.
• Your submitted work: scenario answers, exam answers, and capstone submissions, kept so they can be graded, reviewed on appeal, and shown as the evidence behind your credential.
• Your lab drafts: when you are signed in, what you write in a lab's workbench is saved to your account so it is there when you come back, on any device. It is not graded and not sent to an AI provider unless you press the button that asks the professor for feedback on it. It is deleted with your account. Signed out, a draft stays in your browser only.
• Your voice, only if you choose to speak an answer: the teach-back box has a microphone button. Press it and your recording is sent to our speech-to-text provider, turned into text, and returned to the box for you to edit before you submit anything. We keep the text, because the text is your answer. We do not keep the recording: it is not stored, not logged, and not written to our database at any point. The button is optional and typing is always available.
• Text you paste into the Role Readiness tool: a job description, a CV or resume, or the background you name. It is sent to an AI model provider for that single request, to identify which competencies it describes, and the answer comes back to your screen. We do not keep the text: it is not stored, not logged, and not written to our database. If you attach a CV file instead, it is turned into text in memory and returned to your screen; the file is not stored. If you give a posting's link, our server fetches that page once and reads the posting on it; neither the link nor the page is stored. If you are signed in, the tool also reads which topics you have already passed, which is progress we already hold, and if you choose to save a report to your dashboard we keep only its summary (the role, the figure, the counts and the programs), never the text. Text from the European Economic Area, the United Kingdom and Switzerland, and text whose location we cannot determine, is not sent to any AI provider: it is read by a keyword matcher on our own server, and the report says so.
• Checkout records: what you bought, the amount, the payment reference, any discount code, and the IP address and device recorded at the moment of purchase. The IP and device are kept specifically so we can defend a payment dispute; we do not use them to profile you.
• The country your request arrives from: our hosting provider tells our server a two letter country code with each request, worked out from your network address. We use it for three things and nothing else: to show the price you would actually pay where you are, to decide which regional edition of our free check to show you, and to keep learner writing from the European Economic Area, the United Kingdom and Switzerland away from providers outside those transfer rules. It is country level only, never a city and never a street, we do not store it against your account, and we do not combine it with anything to profile you. The edition control on the page lets you choose a different one at any time, and that choice is kept in your own browser rather than by us.
• Support and safety records: waiting-list requests, problem reports you send us, newsletter signups, and records of misuse of the AI features.
• Basic technical data: standard server logs (e.g. request times) used to operate and secure the service.

Why we are allowed to process it

Where the EU or UK GDPR applies, our legal bases are: performance of our contract with you (delivering the program, grading your work, issuing your credential, taking payment); our legitimate interests (keeping the service secure, preventing abuse, defending payment disputes, and improving the product); your consent (marketing emails and the newsletter, which you can withdraw at any time); and compliance with legal obligations (tax and accounting records).

Automated grading, and your right to a human

Written work is scored by an AI evaluator against a published rubric, and the score contributes to whether a credential is issued. The decision to issue a credential itself follows a fixed rule rather than discretion: pass every core topic and pass the mastery exam. Because that outcome can matter professionally, you have the right to ask a person to review any AI-assigned score by writing to support@gage.academy, and you may reattempt any assessment without limit. Our AI transparency policy explains exactly what AI decides and what it never decides.

How we use it

To provide and personalize the courses, grade assessments, issue completion records, process payments, secure the platform, and improve the product. We do not sell your personal data.

Processors we rely on

Categories of processors, each handling data on our behalf under contract: authentication, database hosting, application hosting and server logs, payment processing, and email delivery. For the AI features, your input is sent to third-party AI model providers under contract, which power the professor, the scenario and exam graders, the credential questions and answers, translation, the capstone assistant, and the retrieval that finds the relevant part of a lesson. If you use the microphone button to speak an answer, the recording goes to a speech-to-text provider on paid terms under which your audio is not used to train their models, and the audio is sent for that single request only. Your name, email, and payment details are never sent to an AI provider. A current list of named processors is available to enterprise buyers and to any individual who asks at support@gage.academy.

Where your data goes

GAGE is based in the United States, so data you give us is processed there. Some of the processors above operate outside the European Economic Area and the United Kingdom, which means your data may be transferred outside your country. Where that happens for EU or UK personal data, we rely on the transfer safeguards offered by those providers, and we keep what is sent to them to the minimum the feature needs. If you would rather not have your writing processed by an AI provider, you can use the programs without the professor and without submitting scenario work, though assessments and the credential require graded submissions.

Your rights

You can access or update your account information in Settings. Where the EU or UK GDPR applies, you also have the right to obtain a copy of your data, correct it, have it erased, restrict or object to its processing, receive it in a portable format, and withdraw any consent you have given. To exercise any of these, write to support@gage.academy from the address on your account and we will respond within one month. You also have the right to complain to your data protection authority: in the United Kingdom that is the Information Commissioner’s Office, and in the European Union it is the supervisory authority in your country.

How long we keep it

Account, progress, and submitted work are kept for as long as your account exists, because they are the evidence behind your credential; delete your account and they go with it, except where we must keep a record. Payment and checkout records, including the dispute-defense fields, are kept for seven years to meet tax and accounting obligations and to answer chargebacks, which card networks allow to be raised long after a sale. Problem reports and abuse records are kept for two years. Newsletter and notify-me signups are stored only after you confirm the address from the message we send, and are kept until you unsubscribe; an address that is never confirmed is not stored.

Contact

Questions about privacy? Reach us via the support page.