The legal bit
Privacy, in plain English
Last updated 29 July 2026. Data controller: Superagenting Pte Ltd, Singapore.
What we collect, and why
If you buy: your email and billing details go to Stripe (our payment processor) so you can pay and get an invoice; we store your email and order details to deliver what you bought and honour the guarantee. Card numbers never touch this site.
If you grab the free chapter: we store your email (and first name, if you give one) to send the chapter and a short series of follow-up emails about the book. Every email has a one-click unsubscribe, and unsubscribing actually works.
Alongside that signup we also record, and you should know about: your IP addressand the country it indicates; the referral or campaign sourcethat brought you here (for example a link from an ad, an email, or a friend's share code); your browser user-agent; and Meta's advertising cookies_fbp and _fbc if they are present. The IP is used to spot self-referrals and referral fraud, the source is used to know which channels work, and the rest is used for the ad measurement described below.
What is sent to Meta: when you sign up or buy, we send Meta a corresponding event — a Lead or a Purchase — from the browser and from our server. That transmission includes your hashed email, the _fbp/_fbcidentifiers, your IP address and user-agent. Meta uses these to attribute and measure ads. Your email is hashed before it is sent; the IP address and user-agent are not.
If you use the course: the course runs on its own site, course.what-the-hell-is-ai.com, on Supabase. Signing in stores your email address and a login session. As you work through it, the course records which lessons you have completed, your attempts at the lesson questions and the final assessment, your score, and — if you pass — your certificate details and the name you chose to print on it. That is kept so your progress survives closing the tab, and so your certificate can be reissued.
Trying Module 1 free: verifying your email to read the free module gets you into the course only. It does not add you to any marketing list — signing in is not consent to be emailed about the product.
If your company buys seats: we store the company name from checkout, the purchaser as administrator, the seats bought, the email addresses assigned to seats, and any company domain approved for self-claiming. Administrators can see who has a seat, their progress percentage, last activity and completion status. They cannot see individual quiz answers or assessment choices — people learn worse when they are being marked.
Analytics: the site uses the Meta Pixel and its server-side counterpart to measure whether our ads work (page views, sign-ups, purchases). Emails are hashed before they are used for ad measurement. We also record a first-touch marketing source (for example, which campaign or link brought you here) alongside a purchase. No learner progress is ever sent to the marketing side, and no advertising or analytics identifiers are attached to your course activity.
How long we keep it
Order records are kept while legally required for tax and accounting. Course accounts, progress and certificates are kept while your access exists, and after a refund your progress is retained rather than deleted so it is still there if you return. Marketing list entries are kept until you unsubscribe. Ask us to delete it and we will, within the limits described under “Your choices”.
What we don’t do
We don’t sell your data, rent your data, or email you on behalf of anyone else. No third party gets your details except the services that run this site and the course: Stripe (payments and invoicing), Resend (email delivery), Supabase (course sign-in, learner progress and certificates), Vercel (hosting), Neon (the marketing database), and Meta (ad measurement). The two systems are deliberately separate: the marketing side never receives your individual course progress, and the course never receives your marketing data.
Your choices
Unsubscribe anytime via the link in any email — that is separate from your course account, so unsubscribing never removes access you paid for. Want your data deleted, corrected, or a copy of what we hold (including your course record)? Emailgeorge@what-the-hell-is-ai.com and we will action it within a few days. If your company bought your seat, your administrator can also remove your access.
Unsubscribing stops marketing emails and keeps your marketing record marked as unsubscribed. If you later sign up again yourself — for the free chapter, say — that is a new request to receive those emails and re-subscribes you. We do not treat an unsubscribe as a permanent block against your own future request.
One honest caveat on deletion: we remove what we can, but some records must be kept. Order and invoice records are retained for as long as tax and accounting law requires, and a minimal record may be kept where it is needed to prevent fraud or abuse or to keep accounts secure. We are not able to delete those on request, and we would rather say so than promise otherwise.