Privacy Policy

1. Introduction

At BrightAIMentor, protecting your personal data and privacy is our highest priority. This Privacy Policy transparently informs you about the data we collect, how we process it, and what control you have over your information, particularly in connection with our AI educational services and learner support.

Our data processing practices comply with applicable Canadian privacy laws and the General Data Protection Regulation (GDPR), to the extent applicable to our activities in providing AI educational services for our valued learners and professionals.

2. Collection and Processing of Personal Data

The collection and processing of your data is strictly limited to the provision, execution, and personalization of our AI educational services and learner support. This includes:

2.1. Data you actively provide to us:

  • Registration information such as name, email address, phone number, and relevant AI learning interests for personalizing educational services
  • Payment information for AI educational services and premium consultation access
  • Learning preferences and educational interests required for personalized AI guidance
  • Contact information and personal preferences for receiving educational updates

2.2. Automatically collected data:

  • Technical information such as IP address, device type, and browser version when using our website
  • Service history and educational service records
  • Communication preferences to optimize our educational services

2.3. Cookies and tracking technologies: We use necessary cookies and, with your consent, analytics cookies to continuously improve our services. You can adjust your cookie settings in your browser at any time or use our website without optional cookies.

3. Purpose of Data Processing

We process your personal data for the following purposes:

  • Educational Services – For organizing and providing personalized AI educational guidance, consultation services, and specialized support
  • Customer Management – For managing educational cases, appointments, payments, and sending relevant educational updates
  • Educational Consultation – To ensure the appropriateness of proposed educational services and create tailored recommendations
  • Quality Assurance – For continuous improvement of our educational services and content delivery

4. Legal Basis for Processing

Our data processing is based on the following legal grounds:

  • Contract fulfillment in providing educational services and managing customer data (Art. 6(1)(b) GDPR)
  • Legitimate interest in improving our educational offerings and optimizing our services (Art. 6(1)(f) GDPR)
  • Compliance with legal obligations, particularly regarding educational and consultation regulations (Art. 6(1)(c) GDPR)
  • Your explicit consent for the collection of certain preference data and for marketing measures (Art. 6(1)(a) GDPR)

5. Data Sharing with Third Parties

Your data is only shared with third parties in the following cases:

  • Payment Service Providers – For secure processing of payments for educational services
  • IT Service Providers – For operating our educational management system and website under data processing agreements
  • Educational Partners – When needed for coordinating educational services, with strictest confidentiality
  • Legal Advisors – For complex educational agreements and legal compliance

We will never share your data with unrelated third parties for advertising purposes and always maintain the highest level of confidentiality.

6. Data Security

To protect your data, we implement advanced security measures, including encrypted data transmission, secure storage, and strict access controls for our personnel. We place particular emphasis on protecting customer information and personal data that require the highest confidentiality.

Physical documents containing personal data are stored in secure facilities and securely destroyed after the expiration of legal retention periods. Our facilities are equipped with modern security systems.

7. Data Retention and Deletion

Your data is only stored for as long as necessary for the specified purposes:

  • Contact and contract data are stored for the duration of the educational service relationship plus legal retention periods.
  • Educational preferences and requirements are retained for up to 5 years after the last activity.
  • Education-related documents are stored according to Canadian law for up to 10 years after termination of educational services.

You have the right to request early deletion of your data, unless this is prevented by legal retention requirements.

8. Your Rights

As a customer or user, you have the following rights:

  • Information about your stored personal data
  • Correction of false or incomplete data
  • Deletion of your data under legally defined conditions
  • Restriction of processing under certain circumstances
  • Data portability in a structured, common format
  • Objection to processing based on legitimate interest

To exercise these rights, please contact us by email at privacy@brightaimentor.com or through our contact form.

9. GDPR-Specific Provisions

As a Canadian company serving customers from the EU, we follow the principles of the General Data Protection Regulation (GDPR) and guarantee the following rights:

  • Cross-border data transfers – When transferring data outside the EU/EEA, we ensure appropriate safeguards, such as standard contractual clauses or adequacy decisions.
  • Data Protection Officer – Our Data Protection Officer is available for inquiries regarding the processing of your personal data at privacy@brightaimentor.com.
  • Right to lodge a complaint – You have the right to lodge a complaint with a data protection supervisory authority, particularly in the EU member state of your residence, workplace, or the place of the alleged violation.
  • Data minimization – We only collect data that is necessary for the specified purposes and store it only for as long as required and legally prescribed.

For EU citizens using our educational services, additional special protection measures apply according to GDPR, including extended information obligations and stricter consent requirements.

10. Changes to the Privacy Policy

We reserve the right to update this Privacy Policy as needed to comply with legal requirements or organizational changes. The current version will always be published on our website and communicated to our customers.

For significant changes, we will inform our customers and users by email or through notifications on our platform.

If you have questions about data protection, we are always available through our contact form, by phone, or by email. Protecting your data is not just a legal obligation for us, but an essential part of our professionalism and respect for our customers and users in the dynamic field of educational services.