Information we collect
We collect account details, profile information, organisation membership, invitations, programme selections, enrolments, programme progress, submitted evidence, generated work products, assessment records, accreditation records, billing identifiers, support messages, audit events and technical logs required to operate the service.
How we use information
We use information to authenticate users, deliver simulated workplace programmes, maintain authoritative programme state, process billing and entitlements, support evidence review, run assessment workflows, issue credentials, provide support, protect the platform and improve service reliability.
AI processing
AIWorkerz uses server-side AI calls to guide learners, generate structured work products and support preliminary evidence review. AI outputs are advisory unless accepted through an authorised assessment workflow. We do not expose service-role credentials or AI provider secrets to the browser.
Evidence and workplace data
Evidence, uploads, generated content and assessment records may contain professional information supplied by learners or organisations. Learners and organisations should not upload confidential third-party information unless they have authority to do so.
Subprocessors and integrations
AIWorkerz uses Supabase for authentication, database and storage services, Stripe for billing, Fly.io for hosting, configured AI providers for server-side AI processing and email infrastructure for support messages. Production deployments should use separate project environments and appropriate access controls.
Cookies and consent
Essential cookies keep users signed in and protect secure sessions. Optional analytics or improvement cookies are only used when consent has been recorded through the cookie preference control.
Retention and security
We retain account, programme, evidence, assessment, billing and audit records for as long as needed to provide the service, satisfy legal or operational requirements, support credential verification and protect platform integrity. Access controls, private storage, audit trails and tenant isolation are used where appropriate.
Your rights
Users may request access, correction or deletion of personal information, subject to legal, billing, audit, credential-verification and dispute-resolution obligations. Contact us through the contact page for privacy requests.