About this Privacy Policy

Key Definitions

To aid clarity, we define key terms used throughout this policy. These definitions align with common data protection terminology and are intended to make our practices more transparent.

Personal data means any information that relates to an identified or identifiable individual, such as name, email address, payment details, and user-generated content submitted to course platforms.

Processing covers any operation performed on personal data, including collection, storage, analysis, modification, transfer, and deletion, whether automated or manual.

A user refers to any visitor, registrant, student, instructor, or organizational representative that accesses hyperleadmaxiora services or resources on hyperleadmaxiora.click.

The service comprises our online learning environment, course materials, labs, community forum, newsletters, and support services related to AI education and training.

Cookies are small text files placed on devices to enable platform functionality, personalize content, remember preferences, and collect analytics data that helps improve the service.

We collect information necessary to deliver courses, manage accounts, provide support, and comply with legal obligations. Collection is limited to data relevant to those purposes and handled with appropriate security safeguards.

Data You Provide Directly

When you register, enroll in a course, or engage in community activity, we may collect the following categories of information:

• Account details: name, email address, username, chosen password (hashed), and organization where applicable.
• Profile and learning data: course enrollments, progress records, completion certificates, and submitted assignments or project artifacts.
• Payment and billing information: payment method details, billing address, and transaction records processed through our payment processor.
• Communications: support requests, messages posted in forums, feedback, and email communications with our team.
• Optional professional information: job title, employer information, and publicly shared collection links submitted for networking purposes.
• Consents and preferences: marketing preferences and explicit consents provided during sign-up or account management.

Automatically Collected Data

We also collect certain technical and usage data automatically when you interact with hyperleadmaxiora.click to operate and improve the platform.

• Device and browser information, IP address, and approximate geolocation to support security, localization, and troubleshooting.
• Usage metrics such as session duration, pages visited, course module interactions, and feature usage to inform product development.
• Analytics data collected via cookies and similar technologies to measure platform performance and user engagement.
• Log data and error reports generated by the platform to support maintenance and incident response.
• Aggregated and anonymized datasets derived from user interactions to improve curricula and lab exercises while minimizing identifiability.
• Security telemetry, including failed login attempts and account activity anomalies, retained for fraud detection and prevention.

Third-Party Data Sources

We may receive information about you from trusted third parties when you choose to link external services or when third parties provide verification or enrichment services.

• Authentication providers if you sign up using third-party credentials.
• Payment processors that handle transactional and billing information on our behalf.
• Analytics and infrastructure providers that supply hosting, telemetry, and performance tools.

Purposes for Processing Personal Data

We process personal data to operate the learning platform, provide educational services, support users, and comply with legal and contractual obligations. Each processing activity is limited to a specific, documented purpose.

• Provision and administration of accounts and course access, including enrollment management and progress tracking.
• Delivery of course materials, labs, certificates, and instructor feedback necessary for learning outcomes.
• Billing, fraud prevention, and business reconciliation associated with paid courses and services.
• Platform maintenance, troubleshooting, security monitoring, and prevention of unauthorized access.
• Improvement of learning content and user experience through aggregated analytics and controlled A/B testing.
• Responding to user inquiries, support requests, and lawful requests from authorities.
• Communication of administrative notices, updates to terms or policy changes, and optional marketing communications where consent is provided.
• Legal compliance, dispute resolution, and enforcement of our terms of service.

Legal Bases for Processing

Where applicable under data protection laws, we rely on specific legal bases to process personal data. The applicable basis depends on the processing activity and the relationship with the user.

• Performance of a contract: processing necessary to deliver educational services and fulfill enrollment agreements.
• Legal obligation: processing required to comply with statutory reporting, taxation, and recordkeeping duties.
• Legitimate interests: processing for platform security, fraud prevention, and product improvement where those interests are balanced against user rights.
• Consent: optional marketing communications and certain analytics features where explicit consent has been obtained and can be withdrawn.

GDPR and International Rights

For users subject to the EU General Data Protection Regulation (GDPR) or similar laws, we describe available rights and how to exercise them. We apply privacy principles including data minimization and purpose limitation in our processing activities.

• Access: request a copy of personal data held about you and information on processing activities.
• Rectification: request correction of inaccurate or incomplete personal data.
• Erasure: request deletion of personal data where legal grounds permit and retention is no longer required.
• Restriction and objection: request restriction of processing or object to processing based on legitimate interests where applicable.
• Portability: request transfer of provided personal data in a structured, commonly used format where technically feasible.
• Withdraw consent: withdraw previously given consent for specific processing activities without affecting processing done prior to withdrawal.

Cookies and Tracking

We use cookies and similar technologies to enable essential site functions, analyze usage, and tailor the user experience. You can manage cookie preferences via your browser or platform controls.

Types of cookies used include essential cookies for authentication, functional cookies for preferences, performance cookies for analytics, and optional marketing cookies when consented.

Essential, Functional, Performance/Analytics, and Marketing. Essential cookies are required for core functionality; others are used only with consent or legitimate interest assessments.

Users may manage cookie settings through their browser or the platform privacy settings. Blocking some cookies may impact functionality such as saved progress or personalized content.

Cookie Preferences

Data Sharing and Disclosure

We share personal data only with parties necessary to provide services, to meet legal obligations, or as directed by users. Third-party access is governed by written agreements limiting use to specified purposes.

• Service providers: hosting, analytics, payment processors, and platform infrastructure partners.
• Professional advisors: legal, accounting, and compliance consultants where necessary for lawful operations.
• Affiliates or contractors engaged to deliver course content, moderation, or certification services under confidentiality terms.
• Law enforcement or regulatory bodies when disclosure is required by law or to respond to lawful requests.
• Aggregated or anonymized data sets that do not identify individuals for research or product development.
• Acquirers or successors in business transaction scenarios, subject to due diligence and contractual protections on data handling.

International Transfers

Personal data may be transferred to service providers or affiliates located outside the user’s country, including to jurisdictions with differing data protection regimes. Transfers are performed under appropriate safeguards.

Where transfers occur, we use measures such as standard contractual clauses, data processing agreements, and assessed vendor safeguards to protect personal data consistent with applicable law.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, and resolve disputes. Retention periods are set based on data type and processing purpose.

Account and profile information is retained for the duration of the active account and for a defined period after account closure to meet legal and administrative needs, typically not longer than reasonably required.

Messages, forum posts, and submitted assignments may be retained to preserve academic records, community context, and for research or quality assurance, subject to anonymization where practical.

Operational logs and security telemetry are retained for periods necessary to contribute incidents and improve platform security, with retention intervals determined by risk and legal considerations.

When retention periods expire or upon verified deletion requests where applicable, we remove or irreversibly anonymize personal data unless preservation is required by law.

Data Security

We implement technical and organizational measures proportionate to the sensitivity of data to protect against unauthorized access, alteration, disclosure, or destruction. Security practices are reviewed regularly and adapted to evolving risks.

• Access controls and role-based permissions to limit data access to authorized team members.
• Encryption of data in transit and at rest where applicable, together with secure key management procedures.
• Regular security assessments, vulnerability management, and incident response procedures to identify and address threats.

Your Data Rights

At hyperleadmaxiora we respect your rights under applicable data protection laws in Thailand and internationally. This section explains the rights you can exercise regarding your personal data that we process as part of our AI education services, online courses, and platform interactions.

• Access: You may request a copy of personal data we hold about you, including records of course enrollments, training progress, and communications with support.
• Correction: If your personal information is incomplete or inaccurate, you can request correction to ensure records used for course administration and certification are accurate.
• Deletion: Where retention is no longer necessary and legal obligations do not require continued storage, you may request deletion of your personal data from our systems.
• Restriction of processing: You may request that we limit how we process your personal data while a dispute about the accuracy or lawful grounds for processing is resolved.
• Portability: For data you have provided, you can request a machine-readable copy suitable for transfer to another service provider, when technically feasible.
• Objection: You may object to processing based on legitimate interests or direct marketing. We will review objections in context and explain any continued processing basis.
• Withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time; withdrawal will not affect processing conducted prior to withdrawal.
• Complain to an authority: If you consider our response unsatisfactory, you can lodge a complaint with the relevant supervisory authority in Thailand.

How to Exercise Your Rights

To exercise any of the rights above, please contact our Data Protection team. Provide a clear description of the request and identity verification details so we can respond appropriately. Requests are handled with professional care to balance your rights with legitimate operational and legal requirements.

[email protected]

We aim to respond to rights requests within 30 calendar days of receipt. If we need additional time due to complexity or volume, we will inform you of the expected timeframe and reason for the extension.