Privacy Policy

Who we are

QUBICON.AI (“Qubicon”, “we”, “us”) is the AI-native corporate training platform, operated from San Francisco, USA and Bengaluru, India. We deliver live, expert-led AI programs augmented by Qube, our adaptive AI copilot, to enterprises, institutions and individual professionals in more than 50 countries. This policy explains what personal data we collect when you use our website, programs and platform, why we collect it, and the choices you have. Questions about anything here can be sent to contact@qubiconai.com or raised through a booked consult at any time.

Data we collect

We collect only what we need to run the platform and deliver your programs. In practice, that means:

• Account details — your name, work email address, company and a password we store only as a salted hash. We never see or store your plain-text password.
• Enrolment records — the programs you enrol in, cohort dates, seat allocations, attendance and completion status.
• Assessment responses — your answers to Skill DNA diagnostics and program assessments, together with the capability scores they produce.
• AI-conversation transcripts — messages you exchange with Qube, stored so the copilot can keep context across sessions and improve your learning experience.
• Payment metadata — order identifiers, amounts, currency and payment status supplied by our payment processor, Razorpay. We never store card numbers, UPI handles or bank credentials; those are handled entirely by Razorpay on its own PCI-DSS-compliant infrastructure.
• Usage analytics — first-party, privacy-respecting measurements of which pages are visited and how features are used, so we can improve the platform. We do not use third-party advertising trackers.

How we use it

We use your data to deliver the programs you enrol in — scheduling cohorts, allocating seats, tracking completion and grading assessments. Qube uses your enrolment context, assessment results and conversation history to personalise your learning: sequencing modules, adjusting difficulty and answering questions at the right depth for you.

We also use your data to issue verifiable certificates. When you complete a program, your name, program title, level and issue date are recorded against a unique certificate code so that anyone you share the code with can confirm the credential is genuine. Finally, we send service communications — enrolment confirmations, cohort reminders, receipts and material policy updates. Marketing messages are separate, optional and always carry a working unsubscribe.

AI-specific commitments

Because an AI copilot sits at the centre of our product, we hold ourselves to commitments that go beyond standard privacy practice:

• Your conversations with Qube are never used to train third-party foundation models. Transcripts stay inside Qubicon's systems and serve only your own learning experience.
• Human review of AI conversations happens only for quality assurance and only with your consent — for example, when you flag an answer or ask us to investigate an issue.
• Enterprise plans include model isolation: AI endpoints deployed inside your virtual private cloud, so prompts and outputs never leave your tenant boundary.
• Automated recommendations — such as module sequencing — can always be reviewed and overridden by human instructors.

Data sharing

We share personal data with exactly two categories of processor: our payment provider (Razorpay) to process transactions you initiate, and our cloud infrastructure providers to host the platform and store data. Both operate under data-processing agreements that restrict use of your data to the services they provide us. We do not sell personal data — not to advertisers, not to data brokers, not to anyone — and we never have. If the law compels disclosure, we limit it to what is legally required and notify you where we are permitted to do so.

Retention

We keep your personal data for the life of your account plus 24 months, after which it is deleted or irreversibly anonymised. Certificate records are the one deliberate exception: they are retained so that the credentials we issue remain verifiable for as long as they are being relied upon — that permanence is the point of a verifiable certificate. If you want a credential removed, you can request revocation, after which verification for that code returns invalid.

Your rights

You can request access to the personal data we hold about you, correction of anything inaccurate, deletion of your data, and a portable export in a machine-readable format. Email privacy@qubiconai.comand we will respond within 30 days. Where local law grants you additional rights — such as under California privacy law or India's data-protection framework — we honour those too. Exercising your rights never affects the price or quality of the services you receive.

International transfers

Qubicon operates from the United States and India, and your data may be processed in either country. Wherever it travels, it is protected by the same safeguards: encryption in transit and at rest, strict access controls limited to staff who need it, and contractual clauses with our processors that impose equivalent protections regardless of geography.

Changes to this policy

When we change this policy, we will post the new version here and revise the “Last updated” date at the top of the page. For material changes — anything that meaningfully alters what we collect or how we use it — we will also notify you by email before the change takes effect. Continued use of the platform after a change takes effect constitutes acceptance of the revised policy.