Privacy policy

Who we are

GC Academy is operated by Gadoci Consulting LLC (“we”). For privacy questions, contact academy@gadociconsulting.com.

What we collect

• Account details. Your name and email address from the sign-in method you choose (an email link, Google, or Microsoft). For Microsoft sign-in we also keep your account’s tenant and object identifiers so we can recognize you securely. If your company added you, we also keep your role and any title or team label they set.
• Learning records. The programs you are enrolled in and why (your company, an invitation, or a purchase), your progress through lessons and videos, your quiz and exam answers and scores, assignment submissions and reviewers’ feedback, reflections, and any certificates or badges you earn.
• Purchases. When you buy a program, Stripe handles the payment. We receive and keep an order record (what you bought, the amount, and the payment status). We never see or store your full card number.
• Connections to Claude. If you connect GC Academy to Claude, we keep a record of that connection and its access tokens so you can see and revoke it.
• Activity and technical data. An audit log of administrative changes (who changed a role, a setting, or an enrollment, and when), plus standard server logs (IP address, browser, request time) kept by our hosting provider for security and troubleshooting.

We do not use advertising trackers or third-party analytics, and we do not sell personal information. Your browser stores a sign-in cookie and your light or dark theme choice. If you arrive through a partner’s link, and you agree where the law requires it, we store a referral cookie for 30 days so that partner gets credit if you sign up or buy. It holds only which link you used. We share counts and amounts with the partner, never your name or email. You can decline it in the banner, and we honor a Global Privacy Control signal from your browser as a decline.

How we use it

• To sign you in and show you the programs you have access to.
• To run your programs: saving your place, grading quizzes, routing assignments to reviewers, and issuing certificates.
• To report progress to the people responsible for a program, as described in the next section.
• To send transactional email: sign-in links, invitations, enrollment notices, due-date reminders, review results, and certificates. We do not send marketing email from GC Academy.

Who can see your learning records

• You can see all of your own records.
• Your company. When you take a program through your company, that company’s administrators can see your enrollment and progress in it. Each program sets how much they see: some show individual progress and results, others show only group totals, and groups smaller than the program’s minimum size (five by default) are hidden. Responses a program marks “Only you can see this” are never shown to your company. Your company never sees programs you take on your own.
• Program staff. Reviewers and facilitators assigned to a program see the submissions and progress they need to grade and run it.
• Gadoci Consulting administrators can see records across the platform to operate it and support you.

Where it lives and who processes it

GC Academy runs on Vercel (application hosting and file storage), MongoDB Atlas (database), SendGrid (email delivery), Google and Microsoft (sign-in, only if you choose them), and Stripe (payments, only if you buy a program). Each acts as a processor on our instructions. Data is stored in the United States. If we add a processor, for example an AI model that drafts a first-pass review of an assignment, we will update this page before it handles your data.

Sign-in with Google or Microsoft

If you sign in with Google or Microsoft we request only your basic profile: name and email address, plus the account identifiers those services provide. We use them solely to create and identify your account. We do not request access to your files, mail, or calendar. GC Academy’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

We keep your account and learning records while your account exists, so your progress and certificates stay available. Some company programs delete individual responses after a set period and keep only group totals; the program tells you when that applies. To delete your account, email us; we delete account details and learning records within 30 days, except order records we must keep for accounting, and audit entries, which keep a record that an action happened without your personal details. Certificates you earned stop verifying once deleted.

Security

Data is encrypted in transit and at rest by our providers. Access to learning records is checked on every request against your role, your company, and the program, and quiz answer keys never leave our servers. No system is perfectly secure; if you believe you have found a vulnerability, please email us.

Your rights

You can ask us to show, correct, export, or delete the personal information we hold about you. Email academy@gadociconsulting.com and we will respond within 30 days. If your company enrolled you, we may also let your company know about a request that affects its programs.

Children

GC Academy is built for professional training and is not meant for anyone under 16.

Changes

If we change this policy in a way that matters, we will note the new date at the top and, for significant changes, tell account holders by email.