Skip to the canvas
Form AI-40 / PRVUpdated August 2026

Privacy

A short course does not need much data. We collect your email address, your payment record, and whatever you choose to write on your canvas — nothing else.

01

What we collect

Your email address, so we can give you access and sign you in.

Your purchase record — amount, currency, date, and a Stripe reference. We never see or store your card number.

Your canvas answers, so your plan is there when you come back. These are stored against your account and are visible only to you.

02

Who processes it

Stripe handles payment and card data. Supabase stores your account, entitlement, and canvas. Resend delivers transactional email. Cloudflare Stream serves the lesson video. Vercel hosts the site.

Each of these processes data on our behalf, under their own agreements.

03

What we do not do

We do not sell your data, we do not share it with advertisers, and we do not run third-party advertising or cross-site tracking on this site.

Marketing email is separate from course email: you only receive it if you ask, and every message can be unsubscribed from in one click.

04

Cookies

The only cookies this site sets are the ones that keep you signed in. There are no advertising or profiling cookies, which is why there is no consent banner to dismiss.

05

How long we keep it

Your account and canvas stay until you ask us to delete them, because access is lifetime and your plan should be there when you come back to it. Purchase records are kept as long as tax and accounting rules require.

06

Your rights

Email hello@corefour.academy to get a copy of your data, correct it, or have it deleted. We will action it within 30 days.

To confirmConfirm the data controller name and address, and whether a UK/EU representative is needed for GDPR, before launch.