Privacy Policy
1. Overview
tubizy.ai is operated by Mountain Harvest Media LTD, a Colorado corporation. We provide an online AI-for-business course, an in-person workshop, an AI sandbox/credits feature, and a reseller program. This policy explains what personal information we collect when you use those services, why we collect it, who we share it with, and what choices you have.
"We," "us," and "tubizy" mean Mountain Harvest Media LTD. "You" means anyone who visits the site, registers for an account, attends a workshop, or signs up as a reseller.
2. Data we collect
Account information
- Name and email (required to create an account).
- Password (stored hashed — we never see the plain text).
- Optional profile fields: business name, role, photo, time zone.
Payment information
- Course purchases and AI-credit top-ups are processed by PayPal and (for some flows) Stripe. We do not receive or store your full card number.
- We retain a record of the transaction (amount, date, last 4 digits if surfaced by the provider, billing email) so we can support refunds and meet tax-records requirements.
Course and AI usage
- Module progress, quiz answers, certificates earned, and bookmarks.
- Prompts you send to the AI sandbox and the responses returned, plus token-usage counts.
- Notes, drafts, and uploads you create inside the platform.
Workshop registrations
- Selected date, dietary preferences (optional), and any accommodations you request.
Reseller information (if applicable)
- Referral code, referred customers, commissions earned, payout email.
Technical data
- IP address, browser/user-agent, device type, pages visited, timestamps.
- Error logs that may include the URL you were on when something broke.
Communications
- Messages you send to support@tubizy.ai, contact-form submissions, and chatbot transcripts.
3. How we use it
- Operate the service: deliver course content, run the AI sandbox, schedule workshops, issue certificates.
- Billing & accounting: process payments, issue refunds, comply with tax law.
- Support: respond to questions, troubleshoot issues, recover lost accounts.
- Improvement: aggregate, anonymized analytics to see which lessons stick and where students get stuck.
- Communications: transactional email (receipts, password resets) and — only with your opt-in — product updates and a short drip series for new students.
- Security & abuse prevention: rate-limiting, anti-fraud, blocking automated scraping.
- Legal: meeting our obligations under applicable law and defending lawful claims.
5. AI processing — in plain English
The AI sandbox and the in-app chatbot send your prompts to a third-party AI provider (currently Anthropic Claude, with optional OpenAI GPT). Here is what that actually means:
- Your prompt and any pasted content go to that provider over an encrypted connection.
- The provider processes the prompt, returns a response, and the response is shown to you.
- Per provider commercial terms, your inputs and outputs are not used to train future models.
- The provider may keep the request briefly for abuse-monitoring (typically 30 days) before automatic deletion.
- We log token counts (for billing) and a short title of your session (for your history). We do not log your full prompts longer than is needed to render your session.
Don’t paste secrets. Do not paste passwords, social-security numbers, or other highly sensitive data into the AI sandbox — it is meant for business writing and brainstorming, not for handling regulated PII.
7. Data retention
- Account data: kept until you ask us to delete it (or for a reasonable inactive-account cleanup, currently 36 months of inactivity).
- Server & access logs: 90 days, then automatically rotated.
- Payment / tax records: 7 years, to satisfy IRS recordkeeping requirements.
- AI sandbox sessions: kept while your account is active; you can delete individual sessions any time.
- Chatbot conversations: retained 90 days for support-quality review, then deleted.
- Email opt-out lists: kept indefinitely as a suppression list so we can honor your unsubscribe.
8. Your rights
Regardless of where you live, we honor the following requests:
- Access — ask for a copy of the data we hold about you.
- Correction — ask us to fix something inaccurate.
- Deletion — ask us to delete your account and personal data (we may retain payment records as noted above).
- Portability — ask for an export in a common format (JSON or CSV).
- Opt-out of marketing — click "unsubscribe" in any marketing email or email us.
- Object / restrict — tell us if you object to a particular processing activity.
To exercise any of these, email support@tubizy.ai from the address on your account. We respond within 30 days. EU/UK residents may also lodge a complaint with their national data-protection authority; California residents may exercise rights under the CCPA/CPRA without discrimination.
9. Children
tubizy.ai is intended for adults running or working in a business. Accounts are restricted to users 13 years and older, and many features (payments, reseller program, workshops) are restricted to legal adults in the user’s jurisdiction. We do not knowingly collect personal information from children under 13; if you believe a child has created an account, email support@tubizy.ai and we will delete it.
10. International transfers
Our hosting and most service providers are based in the United States. If you are accessing the site from outside the US, your data will be transferred to and processed in the US, which may have different data-protection laws than your country. By using tubizy.ai, you understand that this transfer takes place. We rely on the standard contractual clauses our processors offer where applicable.
11. Security
We use HTTPS for all traffic, salted password hashing, CSRF protection, server-side input validation, and least-privilege access for the operations team. No system is perfectly secure, so we encourage you to choose a strong, unique password and to enable two-factor authentication when we offer it. If we discover a breach affecting you, we will notify you and the relevant authorities as required by law.
12. Changes to this policy
If we make a material change, we will post the new policy here, update the "last updated" date, and email registered users at least 14 days before the change takes effect. Continued use of the service after the effective date constitutes acceptance.
13. Contact us
Mountain Harvest Media LTD
Attn: Privacy — tubizy.ai
Colorado, USA
Email: support@tubizy.ai