Privacy Policy

Trainwork ("we", "us", "our") operates the platform at trainwork.org. We provide AI literacy training for business teams. For privacy questions, contact us at admin@trainwork.org.

When you use Trainwork, we collect:

• Account information: your name, work email, company name, and job role when you sign up or purchase.
• Usage data: which practice conversations you've completed, your AI coach and tutor conversations, notes you write, and time spent in the platform.
• Payment information: processed entirely by Stripe. We never see or store your card details.
• Technical data: browser type, IP address, and product analytics (which pages and features you use, and how long you spend) to keep the platform running reliably and to improve the training.

We use your data to:

• Deliver the training program and track your progress
• Personalize coaching and practice content to your role and goals
• Generate your completion certificate
• Show managers aggregated team analytics (completion rates, activity)
• Review the quality of AI coaching: we keep a copy of practice conversations and grade the coach's side of them, so we can catch and fix bad coaching. These copies are deleted after 12 months.
• Send you transactional emails (access codes, certificate, receipts)
• Improve the platform based on usage patterns

We do not sell your personal data. We do not use your data to train AI models.

We share data only with the services needed to operate Trainwork:

• Stripe: payment processing
• Anthropic: powers the AI Tutor and personalization features
• Neon / Postgres: database hosting
• Resend: transactional email delivery
• Vercel: platform hosting
• Upstash: rate limiting and abuse protection (may briefly hold your email address or IP address as a rate-limit key)
• Sentry: error monitoring (technical diagnostics when something breaks)
• PostHog: product and marketing analytics (which pages and features are used, and where people get stuck). It receives an anonymous identifier, and for signed-in learners an account ID and role. It never receives your name or your email address, and session recording is switched off everywhere.
• LinkedIn: if advertising measurement is enabled on our marketing pages, the LinkedIn Insight Tag reports page visits to LinkedIn. It never runs inside the training product itself.

All third-party providers are contractually bound to protect your data and process it only as instructed.

We retain your account data for as long as your license is active. If your account is closed, your data is retained for 90 days for recovery purposes, then deleted. The content of AI conversations (coaching transcripts we keep for quality review, assessment transcripts, and Ghost Writer drafts) is deleted after 12 months even while your account stays active. You may request earlier deletion by emailing us.

You have the right to access, correct, or delete your personal data at any time. Email admin@trainwork.org and we'll respond within 5 business days.

We use a session cookie to keep you signed in, a short-lived cookie for the public demo, and a first-party attribution cookie that remembers which campaign or referrer brought you to our marketing site (it contains no name or email and is never shared).

On our marketing pages, analytics and advertising cookies are optional and off by default. Nothing loads until you accept them in the banner, and declining changes nothing about how the site works. Accepting allows PostHog analytics, and the LinkedIn Insight Tag where advertising measurement is enabled.

Inside the training product, we measure which features are used and where people get stuck, so we can make the training better. That measurement sets no cookie, does not record your screen, and does not capture your clicks or keystrokes indiscriminately: it stores an analytics identifier in your browser and records which pages and features you used. We never sell or share your personal information for cross-context advertising.

All data is transmitted over HTTPS with TLS encryption, and stored data is encrypted at rest by our database provider. Database access is restricted to application servers only. Learner accounts do not use passwords: access is through company-issued codes and HMAC-signed session tokens.

Trainwork is a workplace training product intended for use by adults. It is not directed at children, and we do not knowingly collect data from anyone under 18. Organizations that purchase seats (including schools, where the learners are staff, never students) agree to issue access codes only to adult employees.

We'll notify active users by email of any material changes. Continued use of the platform after changes constitutes acceptance.

Questions about this policy? Email admin@trainwork.org.