Privacy policy

Version of October 22, 2026

1. Data controller

Webmind Sàrl, Rue Jacques-Grosselin 8, c/o Fiduciaire Chavaz SA, 1227 Carouge (GE), Switzerland, UID CHE-229.962.263, which operates the Probata Academy brand. For any question about your data: contact@probataacademy.ai.

We apply the Swiss Federal Act on Data Protection (FADP) and, if you reside in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR).

2. Data we process and why

Free guide request

  • Data: first name, email address, profile (business owner, freelancer, company), language, visit source, date of consent
  • Purpose: sending the guide and, if you agreed, our newsletters
  • Legal basis (GDPR): consent

Team Program request

  • Data: first name, last name, company, job title, email address, number of people, message
  • Purpose: replying to your request and preparing a quote
  • Legal basis (GDPR): pre-contractual measures

Purchase

  • Data: email address, billing address, country, VAT number if any, amount, currency, payment references
  • Purpose: performing the sale, invoicing, accounting obligations
  • Legal basis (GDPR): contract, legal obligation

Learner account

  • Data: email address, sign-in identifier, purchased access
  • Purpose: access to the course
  • Legal basis (GDPR): contract

Progress

  • Data: lessons completed, quiz results, submitted milestones, assessments, certificate
  • Purpose: tracking your course, automated assessment, issuing the certificate
  • Legal basis (GDPR): contract

AI assistant

  • Data: questions asked under lessons and the answers
  • Purpose: answering your questions, improving answer quality
  • Legal basis (GDPR): contract

Browsing

  • Data: necessary technical data (IP address, browser, language and currency preferences)
  • Purpose: operation and security of the site
  • Legal basis (GDPR): legitimate interest

We never have access to your card details. We do not sell or rent your data.

3. Automated decisions

Milestone assessment, security file analysis and certificate issuance are performed automatically, based on the criteria published in the course. You may express your point of view and request that a decision concerning you be reviewed by a natural person by writing to contact@probataacademy.ai.

4. Service providers and processing locations

  • Supabase (Zurich, Switzerland): database, accounts, submitted files, server functions, access emails.
  • Lovable (European Union and other countries under its terms): hosting of the site and learner area.
  • Anthropic (United States): AI model for the lesson assistant (question and lesson content) and for automated milestone assessment (submitted file and note).
  • Stripe (Ireland, United States): online payment and, for individuals outside Switzerland, sale as merchant of record.
  • Brevo (France): sending newsletters, where you have consented.

No name or email address is sent to the AI model with your questions. Milestone files are sent as you submit them: do not include third parties' personal data in them. Under its commercial terms, Anthropic does not use data received through its API to train its models.

Transfers to countries without a recognized adequate level of protection are governed by the European Commission's standard contractual clauses, recognized in Switzerland, or by a recognized certification framework.

5. Retention periods

  • Account and progress: for the duration of your access, then 12 months. After that, your progress, milestone submissions and their files are deleted; only the email address linked to your invoices and your certificate are kept.
  • Questions asked to the AI assistant: 24 months at most.
  • Billing data: 10 years, as required by Swiss law.
  • Certificates: 10 years after issuance, so they can be verified.
  • Free guide requests: deleted 30 days after you unsubscribe or if the address was never confirmed, and at the latest after 3 years without interaction.
  • Team Program requests: 2 years.

These deletions run automatically every night.

6. Local storage and cookies

The site only uses the storage it needs to work: sign-in session, chosen language and currency. We use no advertising cookies.

7. Security

Your data is protected by row-level access rules in the database, encrypted connections and private files available through time-limited links.

8. Your rights

You may request access to your data, its correction, deletion, restriction of processing or portability, object to its processing and withdraw your consent at any time by writing to contact@probataacademy.ai. Every newsletter contains an unsubscribe link.

You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), or with the data protection authority of your country of residence in the European Union.

9. Changes

We may update this policy. The version date appears at the top of the page.