Privacy & Data Handling Notice
AI Accelerator Learn Platform · learn.aiaccelerator.uk · Last updated 6 August 2026
This notice explains what the Learn Platform collects, why, how long we keep it, who processes it on our behalf, and the rights you have over your data. We keep it current as the platform evolves; we may refine the wording following review, but the substance of how we handle your data is described here.
1. Who we are
The AI Accelerator Learn Platform (“the platform”) is operated by AI Accelerator Limited (“we”, “us”). We provide AI-literacy training to organisations, whose employees (“you”, “learners”) use the platform to take that training.
Because learners are usually employees of a client organisation that has commissioned the training, that organisation is the data controller for its employees' data and we act as a processor on its behalf for the training records, while acting as a controller for operating and securing the platform itself. Where your access was arranged by your employer, you can raise data requests either with us or with them.
2. What we collect and why
We collect only what the platform needs to deliver training, show you your progress, and improve the courses:
| Data | Examples | Why we hold it |
|---|---|---|
| Account / login | Email address, sign-in timestamps | To create your account and let you log in |
| Membership | Your name, department, role, and which organisation you belong to | To place you in your organisation's programme and show relevant content |
| Learning progress | Lessons started/completed, in-lesson interactions | To save your place and show your progress |
| Learning activity | A record of learning events (e.g. lesson viewed, section completed, with timestamps) | To power your progress view and anonymous course analytics |
| Course feedback | End-of-course survey: self-rated understanding before/after, sentiment, and any optional comments you write | To measure learning impact and improve courses. Your comments are shown to your programme lead with your name — unless you tick “Share this feedback without my name” on the survey, in which case they see what you wrote but not who wrote it. See §3a |
| Profile / onboarding | Your role, function, confidence and usage answers | To tailor your recommended learning path |
| Notifications | In-platform inbox messages | To notify you of new or relevant content |
| Lesson requests | Topics you ask us to cover, and your reason | To prioritise new content |
| Problem reports | What you tell us is broken or confusing, the page you were on, and your browser, screen size and theme. If you choose to attach screenshots, the images too | To find and fix problems with the platform. Screenshots are optional and never required; they are private to you and the AI Accelerator team fixing the issue, are not shared with your organisation, and go with your other records when we anonymise them. Please avoid capturing anything you would not want us to see — a screenshot shows whatever was on your screen |
| Email preferences | Whether you receive the weekly digest, and an unsubscribe token | To respect your email choices |
| Email send log | A record of digest emails sent to you | To avoid duplicate sends and honour your preferences |
| Email delivery records | Whether an email we sent you arrived, bounced or failed, and the address it was sent to | To tell a wrong address apart from someone who simply hasn’t signed in yet, so nobody is left locked out without us noticing |
| Course assistant | The questions you type into the course assistant, and the recent turns of that conversation | To answer your question and point you at relevant courses. See §9 — this is the one thing we send to an AI provider |
We do not sell your data, and we do not use it for advertising.
3a. Your course feedback, and the choice you have
When you finish a course we ask what went well, what could be better, and what else you would like covered. Those answers go to your programme lead — the person at your organisation running the programme — on their dashboard, with your name against them by default. That is deliberate: it is how a comment turns into a conversation about your team’s learning rather than an anonymous data point.
You can send the words without the name. Tick “Share this feedback without my name” on the survey and your programme lead sees what you wrote and not that it was you. Your ratings still count towards every group figure, so nothing is lost from the result by choosing it.
This is enforced in our database rather than in the page: with that box ticked, the record simply is not readable by your programme lead, and the comment reaches their dashboard with nothing attached to identify you. You can change your mind by resubmitting the survey.
3. Lawful basis
We rely on the following lawful bases under the UK GDPR:
- Performance of a contract (and our client's legitimate interests) for operating the platform and delivering the training your organisation has arranged.
- Legitimate interests for course analytics and improvement, carried out on anonymised, aggregated data wherever possible (see §6).
- The weekly digest is a low-frequency service email sent on a legitimate-interest / soft opt-in basis, with a one-click unsubscribe in every message.
4. Who we share it with (sub-processors)
We host and run the platform using a small number of vetted providers, each bound by a data-processing agreement:
| Provider | Role | Data location |
|---|---|---|
| Supabase | Database, authentication, hosting of your platform data | EU (eu-west-3, France) |
| Vercel | Serves the platform application | US-based, global edge network |
| Mux | Streams the course videos | US-based |
| Resend | Delivers the weekly digest email | US company; email processing in the EU (Ireland) |
| Anthropic | Generates the course assistant’s replies. Receives only what you type into it and the recent turns of that conversation — never your name, your email or your account | US-based |
Your core platform data (accounts and learning records) is held in the EU. Where a provider processes data outside the UK/EU, the transfer is covered by appropriate safeguards (the UK International Data Transfer Agreement / Addendum, or Standard Contractual Clauses).
5. How long we keep it
We keep your account and learning data for as long as your organisation's engagement with us is active.
Your access ends immediately when the programme leader at your organisation removes you, or when the engagement ends. 30 days after that, we anonymise your records: we remove the data that identifies you (your name, your department, your role, your questionnaire answers, and any free text you wrote), we delete any screenshots you attached to a problem report, we delete your email preferences and notifications, and we sever your login permanently. The record of learning activity itself is kept, attached to an anonymous record that no longer identifies a person, so your organisation's reporting is unaffected. We do not keep your name, and you cannot be singled out from what remains.
The 30 days exist so that a removal made by mistake can be put right: if you are added back within that window, your account and your progress are restored and nothing is anonymised. After the window closes, the anonymisation cannot be reversed.
If you would rather we anonymised your data sooner than 30 days, ask us and we will (see §7). Beyond that point we keep only anonymous, aggregated learning statistics (see §6).
6. Anonymous analytics we keep long-term
To understand and demonstrate what learning works, we keep aggregated, anonymous statistics: for example, average confidence improvement by job function and course. These carry no name, no account identifier, and no organisation identifier, we never publish a figure drawn from a single person’s answer, and the statistics are held internally rather than shared with your organisation. Because this information is anonymous, it is not personal data and we may keep it after you leave.
7. Your rights
You have the right to:
- Access the personal data we hold about you, and receive a copy.
- Rectify data that is wrong or incomplete.
- Erasure of your data (“right to be forgotten”), subject to any legal retention we must observe.
- Portability: receive your data in a structured, machine-readable format.
- Restriction: ask us to limit how we use your data in certain circumstances.
- Object to certain processing, including opting out of the digest email.
You are not required to pay a fee to exercise your rights. To exercise any of these, contact hello@aiaccelerator.uk, or, if your access was arranged by your employer, you may also contact them. We respond within one month.
If you have concerns about how we use your personal information, please contact us first so we can try to resolve them. You also have the right to complain to the UK regulator:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 · ico.org.uk
Note: after an erasure, residual copies persist in our daily backups for up to 7 days and then age out automatically.
8. Security
Your data is encrypted in transit and at rest, held in the EU, and access is restricted by row-level security so you (and staff of your organisation) can only see what you're entitled to. Course videos are served through signed, time-limited links so they can't be accessed without a valid session.
Access by our staff is limited to authorised personnel, protected by multi-factor authentication and device-level encryption, and reviewed regularly. We operate incident-reporting procedures and take a layered approach to data protection.
AI Accelerator Limited holds Cyber Essentials Plus certification, an independently audited UK government-backed scheme, demonstrating our commitment to industry-standard cyber security practices.
9. Use of AI
We do not use your learning data to train AI models, and we do not put identifiable or confidential information into public AI tools. Where we use AI internally to support our own work, it is governed by internal policies that protect privacy and confidentiality.
The course assistant is an AI chatbot, and it is labelled as one. The panel says “Powered by Claude” before you type anything. When you send it a question, that question and the recent turns of the conversation go to Anthropic, who generate the reply, along with a short summary of your progress so the answer knows what you have already done. Your name, your email address and your account identifier are never sent. We do not store the conversation, and Anthropic do not use it to train their models under the terms we contract on.
What you type is yours to decide. We do not put your records into it on your behalf — it only ever sees what you choose to write — so please use the same judgement you would with any AI tool and don’t paste in anything confidential. The rest of the platform works exactly the same if you never open it.
We also derive a sentiment score from any comments you leave in an end-of-course survey, so we can see how a course landed across a group. That is used in aggregate.
10. Cookies & local storage
We use only essential browser storage: to keep you signed in and to remember your learning progress. We do not use advertising cookies or third-party tracking, and we don't sell or share your activity with advertisers. Because the storage we use is strictly necessary to provide the service you've asked for, it does not require a consent banner under PECR.
11. Changes and contact
We'll update this notice as the platform evolves and post the current version here. Questions or requests: hello@aiaccelerator.uk.
AI Accelerator Limited · 2 Appleby Yard, Soames Walk, Design District, London SE10 0BJ · Registered in England & Wales, company no. 14725861.