Privacy Policy

Account information you provide: your email address and name; if you sign in with Google, the basic profile (name, email) that Google shares.

Enrollment and payment information: the course you select and your order history. Payments — cards and Alipay alike — are processed by Stripe; we do not store full card numbers.

Usage data: pages viewed, basic device/browser information, and product-analytics events, used to operate and improve the site.

To provide the program (account, access to live sessions, recordings, and your certificate), process payments, send transactional emails (sign-in codes, receipts, course logistics), provide support, run analytics, operate the affiliate program, and comply with law.

We use strictly-necessary cookies for sign-in/session and your language preference. If you arrive through an affiliate link, we set a referral cookie (up to 30 days) to attribute your enrollment. We use privacy-respecting product analytics; we do not sell your personal information.

Our site offers an AI chat assistant for questions about the program. Messages you send are processed by our AI provider (OpenAI) to generate replies, and we store the conversation (your messages and the assistant's) for up to 30 days to provide support and improve quality. Please do not enter passwords, payment card numbers, or sensitive personal information in the chat. The assistant is automated and may be imperfect; it does not give financial or legal advice and cannot approve refunds or account changes — those are handled by a person. If you are signed in, the assistant may reference your own enrollment details; it never has access to other students' data.

We share data with vendors who process it on our behalf: Stripe (card and Alipay payments), Supabase (database and authentication), Resend (transactional email), Cloudflare (hosting and security), Google (sign-in), OpenAI (AI chat assistant), and a product-analytics provider. Each processes data under its own terms and only as needed to provide its service.

The OPCS certificate is co-issued with California Science & Technology University. To issue it, we share necessary enrollment and completion records (such as your name, email, and attendance/completion status) with CSTU. Because CSTU is an educational institution, certain records may be treated as education records under FERPA; CSTU uses them to administer and verify the certificate.

We are based in the United States and our providers may process data in the US and other countries. If you access the service from outside the US (including mainland China), you understand your information is processed in the US under this policy.

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to opt out of certain processing. California residents have rights under the CCPA/CPRA; we do not sell or share personal information for cross-context behavioral advertising. To exercise any right, email contact@bayaiu.ai.

We keep personal information for as long as needed to provide the service and meet legal, accounting, and tax obligations, then delete or anonymize it. We use reasonable technical and organizational safeguards, but no method of transmission or storage is completely secure. The service is intended for adults (18+) and is not directed to children.

We may update this policy and will revise the “Last updated” date. Questions or requests: contact@bayaiu.ai.