Privacy Policy

2.1 Account information

• Name, email address, phone number when provided, company, and account role
• Profile details you submit when enrolling, joining a cohort, or completing your account
• Course-specific details such as attendance, progress, submissions, certifications, and support history

2.2 Authentication and access data

• Password hashes for password-based accounts; we do not store plaintext passwords
• Basic profile details returned by Google OAuth and Microsoft OAuth, such as name and email address
• Two-factor authentication data, including phone numbers and one-time passcode events when you opt into 2FA

2.3 Payment, enrollment, and support data

• Billing metadata and payment status supplied by Stripe; IEC does not store full card numbers
• Enrollment records, invoices, receipts, certificates, proposal records, and dedicated-session scheduling details
• Support requests, refund inquiries, administrative notes, and other account-helping communications

2.4 Automatic collection

• Log data such as IP address, browser, operating system, device identifiers, request timestamps, and page visits
• Session, security, and cookie data used for authentication, abuse prevention, performance, and product diagnostics
• Approximate location derived from IP address for security and operational analytics

2.5 Learning session recordings

We may create Zoom cloud recordings and automated transcripts from cohort sessions. These recordings are stored in a private `cohort-recordings` bucket. Consent is collected at enrollment through an opt-in checkbox and again at session start through a visible recording banner. Recordings are used for instructor quality assurance, student replay access, and - only with a separate written release - derivative marketing content.

2.6 AI interaction data

We log questions, prompts, and outputs submitted to AI Concierge, AI Project Chat, AI Orchestrator, and future IEC AI agents together with the requesting user ID where one is available. We use that data for service quality evaluation and, if you allow it, future fine-tuning of IEC private models. We do not use your prompts or outputs to train third-party models.

2.7 Marketing analytics data

We collect aggregate public engagement signals from IEC-owned social content, including views, likes, comments, shares, and saves, plus aggregate search telemetry from tools such as Google Search Console and Ahrefs. This data is used in aggregate form for marketing measurement and content planning. We do not use it to track non-customers on a per-person basis.

3.1 Service delivery

• Create and manage accounts
• Process payments, enrollments, scheduling, certificates, and access to purchased services
• Deliver coursework, cohort operations, student support, and administrative tools

3.2 Communications and account support

• Send transactional emails such as receipts, confirmations, reminders, reset links, and support follow-ups
• Deliver optional marketing newsletters and campaign updates when you have requested them
• Send SMS one-time passcodes and related account-security messages when you opt into 2FA

3.3 Security, analytics, and operations

• Detect fraud, abuse, account compromise, suspicious activity, and service outages
• Measure performance, debug product issues, and maintain audit trails for sensitive workflows
• Understand how services are used so we can improve the platform responsibly

3.4 AI-assisted content generation

We use AI systems to help produce marketing content. Transcripts of public events, your testimonials (with separate written release only), and our own instructor-authored coursework may become source material for IEC-authored articles, videos, carousels, and social posts. Your personal data is never the subject of derivative content without explicit written release.

3.5 Autonomous publishing

Portions of content published on IEC-owned social channels, designated website sections, and related marketing surfaces may be created and scheduled by an AI pipeline with human editorial oversight. Where FTC guidance or platform policy makes disclosure material to a reasonable reader, IEC applies an AI content label before that content is published.

3.6 Customer support and sales AI

AI Concierge and related systems may draft responses to support, sales, and operational questions. Outputs are human-reviewable for material decisions. IEC does not allow an AI system to complete a purchase, issue a refund, or finalize an account deletion without a human confirmation step.

4.1 No sale of data

4.2 Service providers and subprocessors

We share data with the processors needed to operate IEC. The full vendor-by-vendor list, including data categories, locations, and compliance notes, appears on our Subprocessors page. Current categories include:

IEC also operates registered developer applications for autonomous publishing and platform integrations. These named applications and their current uses are:

• IEC Social OS (TikTok Developer App): publishes IEC-authored video and slideshow content to IEC-owned TikTok accounts only.
• IEC Tech Marketing (Meta Developer App): publishes IEC-authored content to IEC's Facebook Page, Instagram Business Account, and Threads surfaces and may request engagement metrics through Meta's Graph APIs.
• IEC Social OS (LinkedIn Developer App): publishes IEC-authored content to the IEC Tech Inc. LinkedIn Company Page only.
• IEC Growth OS (Google Cloud project): reserved for IEC-owned YouTube publishing when that integration is activated.

Current third-party processor categories include:

• Payment processing: Stripe
• Infrastructure and database: Supabase, Netlify
• Authentication: Google OAuth, Microsoft OAuth
• Transactional email and newsletter: Resend
• SMS OTP: Twilio
• Video conferencing, recording, and transcription: Zoom
• Publishing platforms: Meta (Facebook, Instagram, Threads), TikTok, LinkedIn, YouTube
• AI providers (text, image, video, audio): OpenAI, Anthropic, Google (Gemini), xAI (Grok), Perplexity, HeyGen, Ideogram, Klap, KIE.ai, ElevenLabs, Suno, Hume, Cartesia, Stable Audio, Gamma, Manus
• SEO and search intelligence: Ahrefs, Google Search Console
• Observability and evaluations: Braintrust (planned), Temporal (planned)

4.3 Legal, safety, and business events

We may disclose information when required by law, to respond to lawful requests, to protect the rights or safety of IEC, our users, or the public, or as part of a merger, acquisition, financing, or asset transfer. Any successor would be expected to honor this Privacy Policy or provide notice of material changes.

5.1 Security measures

• TLS encryption in transit
• Encrypted secrets and restricted administrative access
• Password hashing and session-security controls
• Row-level security, audit logging, and role-based access controls where applicable
• Operational reviews, alerts, and governance checks for sensitive automations

5.2 No absolute guarantee

No internet or storage system is perfectly secure. We work to protect your information using reasonable administrative, technical, and physical safeguards, but we cannot guarantee absolute security.

5.3 Your responsibilities

• Use a strong password and keep it confidential
• Enable 2FA when available
• Notify us promptly if you suspect unauthorized account activity

6.1 Account and profile records

We retain account and profile data for as long as needed to provide services, support access to purchased training, enforce agreements, resolve disputes, and comply with legal obligations.

6.2 Financial and tax records

We retain billing, tax, and financial records for the period required by law, which is generally seven years for core payment and accounting evidence.

6.3 Course and certification records

We may retain enrollment, attendance, assessment, certificate, and transcript records so we can verify completion history and continue to provide student support.

6.4 Support, security, and audit logs

Support records, security events, and workflow audit trails are retained for operational, fraud-prevention, and legal-defense purposes for as long as reasonably necessary.

6.5 Recording retention

Cohort recordings are retained for 24 months unless the instructor opts for permanent archive. Derivative transcripts may persist longer once scrubbed of personally identifying references.

6.6 AI-generated content retention

Drafts are retained for 12 months, published content is retained indefinitely as part of the IEC archive, and rejected drafts are purged at 90 days.

7.1 Access and portability

You may view your core account data after signing in to your data controls and request a copy of the data IEC holds about you. If a self-service route is not available, you may also email support@iectechinc.com.

7.2 Deletion

You may request deletion through the signed-in deletion flow or by emailing support from the account email address. We process deletion requests subject to the retention exceptions described in Section 13 below.

7.3 Marketing choices

• Marketing newsletters are sent only after an explicit opt-in or confirmed signup
• You may unsubscribe at any time using the one-click link in each marketing email
• Transactional messages about purchases, access, security, or class activity still continue

7.4 California residents

Where applicable, California residents may have additional rights relating to access, deletion, portability, and non-discrimination under California privacy law.

7.5 EU and UK residents

Where applicable, EU and UK residents may have rights of access, rectification, erasure, restriction, portability, and objection under GDPR or UK GDPR.

7.6 AI-decision review rights

You may request human review of any AI-assisted decision that materially affects your account, including enrollment eligibility, refund processing, or use of your recordings. IEC provides a dedicated request path after sign-in at the AI review page.

7.7 Opt-out of secondary content use

Subjects of testimonials and future-use releases may withdraw consent through your preferences page or by contacting support. For live cohort recording consent, contact support from the email address on your account so IEC can honor the withdrawal prospectively. Materials already published before the change may remain in place.

8.1 Essential cookies

• Authentication and session continuity
• Security controls such as CSRF protection, fraud checks, and safe sign-in flows
• Core site functionality such as remembering state during enrollment or account actions

8.2 Performance and analytics signals

We use first-party and processor-backed analytics signals to understand performance, improve reliability, and measure aggregate marketing outcomes. You can control certain browser-level cookie settings, but disabling essential cookies may break parts of the platform.

13.1 Self-serve

1. Sign in to your IEC account
2. Visit the signed-in deletion flow
3. Complete the Turnstile challenge, acknowledge the staged timeline, and submit the request
4. Watch for the confirmation email and use its cancellation link within 7 days if you change your mind
5. If not canceled, IEC soft-deletes the account after the 7-day window and permanently deletes remaining data after 30 days, subject to the exceptions below

13.2 Email request

1. Email support@iectechinc.com from the email address on your account
2. Use the subject line Delete my data
3. IEC may verify control of the account email and then apply the same staged cancellation-window and retention timeline described above

13.3 Exceptions

• Financial records retained for 7 years for IRS and state tax requirements
• Records subject to active legal hold, dispute, fraud-prevention, or security obligations
• Anonymized aggregate analytics that can no longer be tied back to you

15.1 Enrollment consent checkbox

"I consent to this cohort session being recorded by Zoom Cloud Recording for instructor quality review and my own replay access. I understand that (a) I may attend with my camera off and my microphone muted at any time, (b) my recording will not be used for IEC marketing or AI training without a separate written release, and (c) if I want to revoke this recording consent before or during a live session, I can email support@iectechinc.com and keep my camera off and microphone muted."

15.2 Session-start banner

"This session is being recorded. If you did not consent at enrollment or want to revoke consent now, please turn off your camera and mute your microphone, and email support@iectechinc.com. Your attendance without objection acknowledges the recording."