Cookie policy

Introduction

This policy covers how aiexpertacademy.courses (the marketing site) and app.aiexpertacademy.courses (the learning platform) use cookies and similar technologies. Please read it carefully.

The marketing site at aiexpertacademy.courses uses strictly necessary cookies, a functional cookie that remembers a referral code, plus analytics cookies, affiliate cookies used to credit a partner who referred you, and advertising cookies from Meta (Facebook and Instagram). How we ask about each of these depends on where you are: in some countries we set them only after you opt in, and in others we set them once we have told you about them and given you a way to opt out. Analytics is asked about separately from the affiliate and advertising cookies, which are asked about together as one choice, and the rules are not identical — the affiliate and advertising cookies require your permission in more places than analytics does. The section "How we ask for consent, and where" below explains exactly which applies to you. The learning platform at app.aiexpertacademy.courses sets only strictly necessary cookies required to operate secure, authenticated sessions.

Definitions and interpretation

"Cookie" means a small file placed on your computer or device by a website when you visit certain parts of it or use certain features of it.

"Personal data" means any data that relates to an identifiable person who can be directly or indirectly identified from that data.

"We / Us / Our" means CB Productions LLC, which operates AI Expert Academy, of Sharjah Media City, Sharjah, UAE.

Information about us

The site is owned and operated by CB Productions LLC, which operates AI Expert Academy, of Sharjah Media City, Sharjah, UAE.

Email: hello@aiexpertacademy.courses

Cookies on the marketing site (aiexpertacademy.courses)

The marketing site uses analytics cookies and similar technologies from PostHog (product analytics) and Google Analytics (website analytics) to understand how visitors use the site so we can improve it. This includes recording when someone starts or completes a purchase or sends us a message, so that we can see where the process is going wrong. Google Analytics runs with advertising storage, advertising personalisation and ad-user-data all switched off.

The marketing site also uses affiliate cookies from Awin, an affiliate network. If you reach us through a link published by one of Awin's partners, that link carries a click reference which we store in a first-party cookie named "awc" for up to a year, and we load Awin's tracking script. If you then buy, we tell Awin the order reference, the amount and the currency, so that the partner who sent you is paid their commission. We do not tell them your name, your email address or what you bought. Where the rules require your permission first — which for these cookies includes the United Kingdom as well as the European Economic Area, Switzerland, Brazil and Quebec — nothing is stored and no request is made to Awin until you accept. Everywhere else they run once we have told you about them and given you a way to opt out, which this policy and the banner both do. You can withdraw at any time from the banner or the link in our footer: the cookies are deleted immediately, including the ones Awin's own script sets, and the script is not loaded again. A copy already running in the page you are on is told at once, through Awin's own consent signal, to stop setting or reading cookies, and nothing it does is attached to a purchase. Because paying commission is a commercial purpose rather than a statistical one, we ask for your permission first everywhere it is required, including in the United Kingdom, where the analytics exception described below does not apply to it.

The marketing site also uses the Meta Pixel, an advertising technology from Meta Platforms (Facebook and Instagram), so that we can measure the advertising we run there and show it to people likely to be interested. When it is running it sets two first-party cookies: "_fbp", a randomly generated identifier for your browser, and "_fbc", recorded only if you arrive from a Meta advertisement, from the click identifier in the web address. Both last for up to 90 days. The pixel tells Meta which pages of this site you look at, and tells Meta separately when you open the page where you buy and when you begin a purchase — the latter with the price shown to you, its currency, and the number of people it would cover. That headcount is entered by you, and it is the only thing typed into the form either of those events carries: your name, company and email address are not sent with them. The one further exception is described next, and applies only to a completed purchase. If you buy, we also tell Meta that a purchase was made, its value and currency, an order reference, and a scrambled (hashed) form of your email address, which is what lets Meta match the purchase to an account there. Your email address is sent only from our own servers and only in that scrambled form; your browser reports the same purchase without it, and Meta counts the two as one. We do not tell Meta your name, your telephone number, or what you bought. These cookies follow the same rules as the Awin cookies described above, and are asked about together with them as a single choice: your permission first where the rules require it, the United Kingdom included, and notice with the offer to opt out everywhere else. If you withdraw, the pixel is told to stop at once through Meta's own consent signal, both cookies are deleted, the script is not loaded again, and none of the purchase details above are sent. Awin and Meta are the only advertising or cross-site tracking on this domain.

The marketing site also sets two strictly necessary first-party cookies, "aea_geo" and "aea_geo_mkt". Each records nothing about you except which of the two consent rules above applies to your visit, worked out from the approximate country our host reports for your connection. Each holds one of two words and no personal data. They are separate because the rules are not the same for every purpose: "aea_geo" carries the rule for the analytics described above, and "aea_geo_mkt" carries the rule for the Awin affiliate cookies and Meta advertising cookies described above, which need your permission in more places than analytics does. Because their sole purpose is to deliver a service you have asked for — this page, under the right privacy rules — they are set without requiring consent.

The marketing site also sets one functional first-party cookie, "aea_ref", when you arrive through a referral or partner link (a "ref" code in the web address). It stores only that short referral code for up to 30 days so that, if you return later to make a purchase, we can credit the partner who referred you. It holds no personal data and is not used for advertising or cross-site tracking. Where analytics is running, the referral code is attached to the analytics events described above and is therefore shared with PostHog, Google Analytics and Vercel, so that a purchase can be attributed to the partner who referred you and any commission paid; where analytics is switched off, or has not been accepted in a region that requires opt-in, no such event is sent and the code is not shared. Because the cookie itself is functional rather than analytics, it is set without requiring consent.

The site is hosted on Vercel. Vercel may process your IP address and standard HTTP request headers for the purpose of serving pages and protecting against abuse. This processing occurs at the network layer and does not involve cookies stored on your device.

We also use Vercel Web Analytics to measure how many people visit the site. For each page view it records the page path, the referring site, an approximate location (country), the operating system, browser and device type, and a timestamp. It uses no cookies and stores nothing on your device; repeat views within a single day are instead recognised through a hash derived from your IP address and browser details, which is discarded and regenerated every day. That hash is pseudonymous rather than anonymous, so we treat the data as personal data under the GDPR. Because nothing is stored on or read from your device, we do not consider this to require cookie consent; the processing itself relies on our legitimate interest in understanding basic traffic levels, and you have the right to object to it at any time using the contact details below. It is never used for advertising, profiling, or tracking you across other websites.

Cookies on the learning platform (app.aiexpertacademy.courses)

The learning platform sets only strictly necessary cookies. These cookies are essential to the operation of the platform — without them you cannot log in, maintain a session, or access your courses.

Strictly necessary cookies include session and authentication cookies set by WorkOS (our sign-in provider) and application session cookies set by the platform itself. These cookies do not track you across other websites and are not used for advertising or analytics purposes.

Stripe, our payment processor, may set cookies on the checkout flow to detect fraud and ensure payment security. These cookies are strictly necessary for the payment transaction to complete.

All strictly necessary cookies are either session cookies (deleted when you close your browser) or short-lived persistent cookies (expiring within 1 year). No tracking or profiling cookies are used.

Cookie categories

Strictly necessary — cookies that are essential for the site or platform to function. These cannot be disabled without breaking core functionality such as login and session management. They are always active. This category also includes "aea_geo" and "aea_geo_mkt", which record only which consent rule applies to your visit.

Functional — a first-party cookie ("aea_ref") that remembers a referral or partner code so that a later purchase can be correctly attributed to the partner who referred you. It is essential to that referral feature, contains no personal data, and is not used for analytics or advertising.

Analytics — cookies set by PostHog and Google Analytics on the marketing site to measure usage and improve the site. These are non-essential. Depending on where you are, they are set either only after you opt in, or after we have told you about them and offered you a way to opt out.

Affiliate and advertising — a first-party cookie ("awc") and a third-party script from Awin, used to credit and pay the affiliate partner who referred a purchase, together with the Meta Pixel and its two first-party cookies ("_fbp" and "_fbc"), used to measure our advertising on Facebook and Instagram. These are non-essential, and are asked about as one choice. Like analytics, they are set either only after you opt in or after we have told you about them and offered you a way to opt out, depending on where you are — but the first rule covers more countries for these than it does for analytics, the United Kingdom among them. Declining leaves them off and changes nothing else about the site.

We use no other advertising, profiling or cross-site tracking technologies beyond those described above, and none of the above is used to build a profile of you or to target advertising at you elsewhere.

How we ask for consent, and where

Privacy law does not treat analytics cookies, or affiliate and advertising cookies, the same way everywhere, so neither do we — and the two are not always governed by the same rule. We work out which rule applies to each from the approximate country our host reports for your connection, and record the answers in the "aea_geo" and "aea_geo_mkt" cookies described above.

Opt in first. If you are in the European Economic Area, Switzerland, Brazil, or the Canadian province of Quebec, no PostHog or Google Analytics cookie is set, and no request is made to either, until you accept. Declining is offered alongside accepting, is no harder to choose, and leaves both switched off. The same opt-in rule covers the Awin affiliate cookies and the Meta advertising cookies, everywhere they apply — see the paragraph on the United Kingdom below, which is the one place the two rules differ. This rule covers the two cookie-based providers; Vercel Web Analytics, described above, stores nothing on your device and runs on our legitimate interest rather than on consent, so it measures visits everywhere, including before you answer. You can object to it at any time using the contact details below.

Notice and opt out. Everywhere else — including the United Kingdom, the United Arab Emirates, the United States and the rest of the world — analytics is active when you arrive, we tell you so on your first visit, and you can switch it off at any time from that banner or the link in our footer. The Awin affiliate cookies and the Meta advertising cookies work the same way in those countries, and are likewise active when you arrive — with the exception of the United Kingdom, where they wait for your acceptance even though analytics does not, for the reason given in the next paragraph.

If you are in the United Kingdom. We rely on the statistical-purposes exception introduced by the Data (Use and Access) Act 2025. We use analytics only to produce aggregate statistics about how this site is used, so that we can improve it. Google Analytics runs with advertising storage, advertising personalisation and ad-user-data features switched off; PostHog runs with automatic interaction capture and session recording switched off. That exception covers analytics only. It does not cover the Awin affiliate cookies or the Meta advertising cookies described above — paying commission and measuring advertising are commercial purposes, not statistical ones — so in the United Kingdom those are set only if you accept them, exactly as in the European Economic Area. You can switch analytics off, or withdraw the affiliate and advertising cookies, at any time from the banner or the link in our footer.

If we cannot tell where you are — because the location is missing, or is not a country we recognise — we apply the opt-in rule. We would rather collect nothing than collect something we were not entitled to. If you use a VPN or proxy, we see the country it connects from and treat that as your location, the same as any other.

We honour Global Privacy Control. If your browser or an extension sends a GPC signal, we switch analytics, the Awin affiliate cookies and the Meta advertising cookies off and keep them off, unless you turn them back on yourself.

Whichever rule applies to you, a choice you make yourself always overrides the default, and it stays in force if you later visit from another country.

Strictly necessary and functional cookies may be set without prior consent. You can withdraw consent, or opt back in, at any time.

You can also disable cookies in your browser settings. Most browsers allow you to refuse all cookies or to refuse third-party cookies only. Please note that disabling strictly necessary cookies will prevent you from logging in to the learning platform.

For instructions on how to manage cookies in your browser, consult the help documentation for your specific browser (for example: Google Chrome, Mozilla Firefox, Safari, Microsoft Edge).

Changes to this cookie policy

We may alter this cookie policy at any time. Any changes will become binding on your first use of the site after the changes have been made. You are advised to check this page from time to time. In the event of any conflict between the current version and any previous version, the current version prevails.

Questions

If you have any questions about how we use cookies, or about our privacy and data practices generally, please contact us at hello@aiexpertacademy.courses.