Privacy Policy

Last updated: 25 September 2026

Experrt ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Experrt platform, website, and related services (the "Service").

Who is responsible for your data

The controller of your personal data is Neural Network AI FZ-LLC, trading as Experrt, a free zone limited liability company in RAKEZ (Ras Al Khaimah Economic Zone), United Arab Emirates(Licence No. 47031862, Registration No. 0000004087302). Contact us about anything in this policy at hello@experrt.com.

1. Information We Collect

1.1 Information You Provide

• Account Data: name, email address, job title, department, bio, skills, and profile avatar when you register or update your profile.
• Organisation Data: company name, industry, size, website, department structure, and organisation logo.
• Assessment Data: responses to AI maturity assessments, quiz answers, and self-reported scores.
• Chat & AI Interaction Data: prompts, messages, uploaded files, and conversation history when using the AI chat interface.
• Billing Data: payment method details are collected and processed directly by Stripe. We store your Stripe customer ID and subscription status but do not store credit card numbers.
• Communications: emails you send to us and feedback you provide through the platform.

AI-assessed agent courses

For agent-course practical assessments, we store your submitted project evidence, AI feedback, scores and assessment records. OpenAI processes the submitted text to produce feedback. Remove secrets and unrelated personal information before submitting. If you pass, your certificate has a public verification page showing your profile name, course, course version, assessed skills, date and assessment method. Course notes and project submissions are not published on that page. Your assessment report is emailed to your account address with a PDF attachment; the same report is available through your signed-in course account.

Self-paced courses

When you buy a self-paced course, Stripe collects your card details on our behalf; we never see or store your card number. Stripe sends us your name, email address, the amount paid and payment references, which we keep as the record of your purchase.

When you save a sign-in, we create a learner account with your name, email address and password (stored only as a secure hash by our authentication provider). As you work through a course we store your answers, check results, progress and the work you sign at the end.

When you sign your final work, we publish a record page showing your name, the course, the date and the work you signed. Anyone with the link or reference can view it. You choose whether to share it.

If you finish a course you may leave a review. We publish your rating, your words, an optional job title and either your first name and initial or your full name, as you choose, with a Verified learner label. You can edit or remove your review at any time, and it is deleted if you close your account. We may hide a review that breaks the law or our course terms, but we do not edit reviews or pay for them.

If you buy places on a course for other people, we store the names and email addresses you give us for those people and send each of them an invitation. We use them only to give them access to the course. The buyer can see whether each person has accepted, how many lessons they have passed and whether they have finished, but not their answers.

We email you a receipt, a sign-in confirmation, reminders to continue a course you have bought and, once you finish, one suggestion for a next course. You can stop course suggestions at any time from the link in the email or in My account; receipts and account emails are always sent. We also notify our team at hello@experrt.com of each purchase, new learner account and completed course, and of any team-session enquiry you send from My learning.

You can download your learner data or close your learner account yourself from My account.

Public learning check and enquiries

When you try the public learning agent, we save your brief, generated materials and task progress in a guest session. An essential cookie lets you return to that session for up to 12 hours. We use usage counters and a hashed network identifier to limit free use. Your brief is processed by our AI provider to create the materials. If you ask us to email your pack, we save your name, email, optional organisation and permission, send the pack to you, and share your details, brief and materials with our team at ag@experrt.com for follow-up about your request. This does not subscribe you to a newsletter.

When you unlock a public learning check, we save your name, email, optional organisation, selected subjects, answers and calculated learning priorities. We also record your consent choices and when you submitted them. Answers remain in your browser tab until you submit the results form. This self-reported check is not automatically linked to an employer or added to an employee assessment record.

We save contact enquiries so our team can respond even if an email notification fails. Access to these enquiries is restricted to authorised staff. Submitting an enquiry or unlocking results does not subscribe you to marketing. We use a separate optional choice for learning ideas and promotional updates; you can withdraw it by contacting ag@experrt.com or using the unsubscribe option in a marketing email.

1.2 Information Collected Automatically

• Usage Data: pages visited, features used, AI model usage, token consumption, timestamps, and interaction patterns.
• Device & Browser Data: IP address, browser type, operating system, device identifiers, and screen resolution.
• Cookies & Similar Technologies: see our Cookie Policy for details.

2. How We Use Your Information

We process your personal data for the following purposes:

• Providing the Service: authenticating your identity, managing your account, processing AI requests, generating recommendations and roadmaps, and delivering assessment results.
• Billing & Payments: processing subscriptions, managing seat allocation, and handling invoicing through Stripe.
• Communications: sending transactional emails (assessment invitations, reminders, results, approval notifications) and important service updates.
• Analytics & Improvement: understanding how the Service is used, diagnosing technical issues, and improving features.
• Security & Compliance: detecting and preventing fraud, abuse, and security threats; enforcing our Terms of Service; and meeting legal obligations.
• AI Model Routing: selecting the appropriate AI model based on your plan, usage quotas, and query complexity.

3. Legal Basis for Processing

If you are in the United Kingdom or the European Economic Area (EEA), the UK GDPR or EU GDPR applies to our processing of your data, and we rely on:

• Contract Performance: processing necessary to provide the Service you signed up for.
• Legitimate Interests: analytics, security, and service improvement, where your rights do not override our interests.
• Consent: for optional cookies and marketing communications, which you can withdraw at any time.
• Legal Obligation: where processing is required by law, such as keeping sales records for tax.
• Course purchases and learning: providing a course you have bought, your progress and your signed record is contract performance. Suggesting a next course to someone who has bought one is based on our legitimate interests, and you can opt out at any time.

4. Third-Party Service Providers

We share your data with trusted third-party processors who assist in operating the Service. These providers are contractually obligated to protect your data:

5. AI Data Processing

When you interact with our AI features, your prompts and contextual data are sent to third-party AI model providers for processing. Important details:

• We apply guardrails including PII detection and prompt injection prevention to minimise sensitive data exposure.
• AI providers process data according to their own privacy policies and data processing agreements.
• We do not use your data to train our own AI models. Third-party providers' data retention policies vary; we select providers that offer zero-data-retention options where available.
• Chat conversations are stored in our database for your continued access and may be deleted by you at any time.

6. Data Retention

• Account Data: retained for as long as your account is active. Deleted within 30 days of account deletion.
• Chat History: retained until you delete individual conversations or your account.
• Assessment Data: retained for the lifetime of the organisation account to support historical trend analysis.
• Billing Records: retained as required by tax and financial regulations (typically 7 years).
• Learner Accounts and Course Progress: kept while your learner account is open. Closing the account erases your sign-in, progress and signed records straight away. Course purchase records are kept without your name or email for as long as tax law requires.
• Audit Logs: retained for up to 12 months for security and compliance purposes.
• Usage Analytics: aggregated and anonymised data may be retained indefinitely.

7. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS 1.2+) and at rest.
• Row-level security (RLS) policies to isolate tenant data.
• Secure session management with HTTP-only cookies.
• Rate limiting and abuse prevention.
• Regular security reviews and dependency audits.

No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

8.1 UK and EU GDPR Rights

• Access: request a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure: request deletion of your data ("right to be forgotten").
• Portability: receive your data in a structured, machine-readable format.
• Restriction: request limitation of processing.
• Objection: object to processing based on legitimate interests.
• Withdraw Consent: withdraw consent at any time where processing is based on consent.

8.2 CCPA Rights (California Residents)

• Right to know what personal information is collected and how it is used.
• Right to delete personal information.
• Right to opt out of the sale of personal information. We do not sell your personal information.
• Right to non-discrimination for exercising your privacy rights.

8.3 UAE Residents

If you are in the United Arab Emirates, you have the rights given by the UAE Personal Data Protection Law, including access, correction, erasure and objection.

Learners can download their data and close their account at any time from My account. To exercise any other right, contact us at hello@experrt.com. We will respond within one month.

9. International Data Transfers

We are based in the United Arab Emirates, and our service providers process data in the European Union, the United Kingdom and the United States. Where your data leaves the UK or the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or on an adequacy decision.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. The "Last updated" date at the top reflects the most recent revision.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

• Email: hello@experrt.com
• Post: Neural Network AI FZ-LLC, RAKEZ (Ras Al Khaimah Economic Zone), United Arab Emirates

If you believe we have not handled your data properly, you can complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EEA, the authority where you live or work. We would appreciate the chance to put things right first.