Privacy policy
What Nextia Learning collects when you read a lesson or create an account, why, where it is stored, how long we keep it, and how to download or delete it.
Nextia Learning is operated by 14096096 Canada Inc., doing business as Nextia Intelligence.
Who we are and what this policy covers
Nextia Learning (learning.nextia-ai.com) is a free learning site. It is operated by 14096096 Canada Inc., a Canadian corporation that does business as Nextia Intelligence ("Nextia", "we", "us").
This policy covers the Nextia Learning site, the accounts on it, and the emails that it sends.
It does not cover:
- Nextia’s other services, such as consulting, sessions and bookings on nextia-ai.com. The Nextia Intelligence privacy policy covers them.
- Other sites that lessons send you to, such as Google Colab, Kaggle, GitHub, YouTube, LinkedIn and cloud providers. Each one has its own privacy policy.
Person in charge of the protection of personal information
Our Privacy Officer makes sure that we obey Québec’s Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). Write to them at privacy@nextia-ai.com.
If you read without an account
You can read every lesson without an account. We do not record what any one guest reads. The site has no advertising cookies and no scripts that follow you from site to site.
- Visit statistics. Cloudflare Web Analytics counts page visits and measures how fast pages load, by country, browser and type of device. It sets no cookies, does not identify you and does not follow you to other sites. We see only totals.
- Technical logs. Cloudflare, which delivers the site, keeps short-lived logs (such as IP address and browser type) to deliver the site and protect it from abuse.
- Your browser keeps your choice of light or dark theme. It is not sent to us.
- “Did this page help you prepare?” If you answer this question on an interview guide page, we save your answer, the page and the time. We do not save anything that identifies you, and your browser does not keep your answer.
- Contact form. If you write to us with the contact form, we receive your name, your email address, the topic and your message by email, in our Google Workspace mailbox. If you are signed in, the email also shows your account’s email address. The site does not keep a copy. We use the message only to answer you, and we keep it only as long as we need it for that.
- Python exercises. When you select Run in a Python exercise, your browser downloads Pyodide (Python for the browser) from this site. The code runs in your browser, and we do not receive it.
What we collect when you create an account
An account lets you enroll in courses, track your progress and get certificates. We collect only what these features need:
- Account: your name and email address, and a profile picture link if Google, GitHub or LinkedIn sends one. If you sign in with Google, GitHub or LinkedIn, we receive only your name, email address and picture, never your password or your other data there. If you sign in with an email link, we do not store a password at all. We also store the language of our emails to you (English or French), which you can change in your profile.
- Sign-in records: when you signed in, and the IP address and browser of each session, to keep your account secure.
- Learning: the courses you enroll in, the lessons you start and complete, and your answers to knowledge checks with the result that you chose.
- Profile (all optional): your background, your experience in each area, your goal, the hours per week you can study, and anything you write about your ambitions.
- Feedback that you send from a lesson: the type of problem, your message, and how many minutes the lesson took, if you say. Notes that you send from an interview guide page: the page, your answer to “Did this page help you prepare?”, and your message.
- Reviews that you write about a course: the rating, the text, and the name that you choose to show.
- Certificates: the course, the date, the level, and the name that you choose to show.
- Activity: the last day that you used your account, so that we can delete accounts that are not used (see “How long we keep it”).
- Email reminders (optional, off unless you turn them on): what you chose to receive, how often and at what hour, your time zone, when you turned them on, when we sent each reminder and which courses it suggested, and the courses that you marked “Not interested”.
How we use it
- To run your account: sign you in, save your progress and show it to you.
- To make your certificates, and to let other people verify them.
- To suggest courses and a learning path from your profile. These are only suggestions, made by simple rules. You choose what to take.
- To read your feedback and notes, and fix the lessons and guides. To approve and show reviews.
- To improve the courses, from totals such as how many learners complete a lesson. These totals do not identify you.
- To send emails that the service needs: sign-in links, and a warning before we delete an inactive account.
- To send reminder emails, only if you turn them on in your profile: your progress and next lesson, and course suggestions made by simple rules, at the times that you choose. They contain no tracking pixels. Each one has links to pause or stop them, and you can stop them at any time. We do not send newsletters or other marketing emails.
- To protect the site from abuse, and to obey the law.
We do not sell or rent personal information. We do not use it for advertising, and we do not use it to train AI models. We do not make decisions about you based only on automated processing. If we add AI features that use your data, we will change this policy, and tell you, before they start.
What other people can see
Most of your data is private: only you, and our course team when it is necessary, can see it. The course team sees reviews and feedback without your email address. Two things can be public:
- Certificates. A certificate has a public page, with the name that you chose, the course, the level and the date, so that people can verify it. You can change the name, make the certificate private, or withdraw it, at any time. If you choose Post on LinkedIn, we send LinkedIn the image of the certificate and the text that you wrote, and LinkedIn publishes them on your feed. We keep them for at most one hour, until you finish on LinkedIn, and we keep no access to your LinkedIn account.
- Reviews. After the course team approves a review, the course page shows its rating, its text and the name that you chose. You can delete your review at any time.
Consent
When you create an account, you agree that we collect and use your information as this policy describes. The profile, feedback and reviews are optional: you give them only if you want. You can withdraw your consent at any time by deleting your account.
Service providers and where your information is stored
We use few service providers. Each one may use personal information only to give its service to us, and must protect it:
- Cloudflare — hosts the site and the database, sends our emails, measures visits and page speed, and protects the site from abuse. The main database is in Cloudflare’s eastern North America region, which can be in the United States. So that the site is fast around the world, Cloudflare also keeps read-only copies of the database in its other regions (North America, Europe, Asia-Pacific and Oceania). After you sign in or save something, a technical cookie that holds no personal information makes sure that you see your own latest changes.
- Google, GitHub and LinkedIn — only if you choose to sign in with them. LinkedIn also, if you choose to post a certificate there.
- Google Workspace — our email, if you write to us.
So your information can be stored or processed outside Québec and Canada, mainly in the United States and, for the copies of the database, in other countries, where the authorities can have access to it under local law. Before information leaves Québec, we assess whether it will have adequate protection, and we rely on the contracts and safeguards of each provider.
We can also disclose personal information when the law requires it, or to professional advisers (such as our lawyer or accountant) who must keep it confidential.
How long we keep it
- Your account and its data: until you delete your account. When you delete it, we delete everything in this list at once. Copies in our database provider’s backups disappear within 30 days.
- Accounts that are not used: if you do not use your account for 3 years, we email you. If you do not sign in during the next 30 days, we delete the account and all its data. To use your account means any time that you open the site while you are signed in.
- Sign-in links work for 15 minutes. Sessions end after 30 days without use.
- Technical logs: a few days.
When we delete an account, its certificates are deleted too, and their links stop working. To keep a copy of your data, download it from your profile first.
How we protect it
All traffic uses HTTPS. The sign-in cookie cannot be read by scripts on the page. We store no passwords, and we store sign-in links only in hashed form. The number of sign-in requests is limited. Only the course team can open the admin tools, with their own accounts. Secrets are kept in Cloudflare, not in our code. No system is perfectly secure, so we also collect only what we need.
If a confidentiality incident presents a risk of serious injury, we will tell the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada and the people affected, as the law requires. We keep a register of all incidents.
Your rights
You can do most of this yourself, on your profile page:
- See and download your data: select “Download my data” to get all of it in one file (JSON).
- Correct it: change your profile, and the name on your certificates.
- Delete it: select “Delete my account”. This deletes your account and all its data.
You also have the right to know how we use your information and to whom we disclosed it, to withdraw your consent, and to make a complaint. For these, or if you cannot sign in, write to privacy@nextia-ai.com. We may ask you to confirm your identity first. We answer within 30 days, free of charge.
If you are not satisfied with our answer, you can contact the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.
Children and teenagers
Anyone can read the lessons. To create an account, you must be at least 13 years old. If you are younger than 14, a parent or tutor must agree before you create an account. If the law where you live sets a higher age for this consent, that age applies.
We do not knowingly keep accounts of children younger than 13. If you think that a child has an account, write to privacy@nextia-ai.com and we will delete it.
Changes to this policy
We will publish each change on this page and change the date at the top. If a change affects how we use information that we already have, we will email the account holders before it applies.
Contact
Privacy Officer, 14096096 Canada Inc. — privacy@nextia-ai.com.