Your privacy
Privacy policy
What we collect, why we collect it, who sees it, how long we keep it, and what you can do about it, in plain words.
Last updated: 31 October 2026
The short version
- We collect what we need to run your account, your lessons, your simulations, your certificates and your payments.
- What you write to the AI instructor and in a simulation is processed by an AI service to answer and assess you, only after you agree, and may be read by faculty.
- We do not send your name or email address to the AI service.
- You can answer the board by speaking. Your browser turns your speech into text using its own speech service. We never receive or keep your audio: only the text, and a few numbers about how you spoke. Typing always works.
- We delete conversations after 365 days. We keep results and certificate records.
- Anyone with a certificate's number or QR code can check it. The check shows your name, course and level, never your score. You can hide a certificate at any time, and appearing on a public register is your choice.
- Sponsor banners may appear in the classroom, on course and programme pages and on your My classes page, and a sponsor may be named as the sponsor of a course or programme. They are labelled, they are pictures we host ourselves, and we count how often each is shown and clicked in total, never by person.
- We use no advertising or analytics trackers. Your card details go to Paystack, never to us.
- You can ask to see, correct, export or delete your data at any time: write to support@brandsclass.com.
Who we are
BrandsClass Executive Academy (“BrandsClass”, “we”, “us”) is run by Brands Nexus Network Limited. We are the “controller” of the personal data described here, which means we decide why and how it is used. For any privacy question or request, write to support@brandsclass.com.
We aim to follow the data protection laws that apply to us and to our learners, including the Nigeria Data Protection Act 2023, Ghana’s Data Protection Act 2012 and, where they apply, the EU and UK GDPR.
What we collect and why
We collect only what the service needs. The table says what, why, and the lawful basis we rely on.
| Part of the service | What we hold | Why | Lawful basis |
|---|---|---|---|
| Your account | Your name, email address and password (stored scrambled, never readable by us), and whether you have confirmed your email. | To create and secure your account and to email you about it. | Contract |
| Lessons | Which lessons you have opened and finished, and the questions you ask the AI instructor with its answers. | To run the course, show your progress and let you ask questions. | Contract, and your consent for the AI processing |
| Simulations | What you write, the board’s replies, your scores and feedback, when you started and finished, how many replies you gave and how long each took. | To run the simulation, assess you fairly, handle appeals and keep the record behind a certificate. | Contract, and your consent |
| Spoken answers (only if you use them) | That you agreed (when, the language you chose, and whether you asked that your delivery not count). For each spoken answer: the number of words, how long you spoke, pauses, restarts and fillers the browser heard, how long you took to begin, a reading of your volume against the room, whether the room was noisy, and how confident the speech engine was. No audio. | To show you feedback on your delivery and, within a small limit, to adjust your simulation score. | Your consent |
| Assessment integrity (only if your organisation turns it on) | Counts of the times text was pasted or you left the simulation window. Not what was pasted. | So your organisation can run a fair assessment. You are told before you begin and must acknowledge it. | Legitimate interests of your organisation |
| Certificates | The name you confirm, the course, the level, the dates, the certificate number and a record of who signed it. | To issue the certificate and let others check it. | Contract and legitimate interests |
| Orders and payments | Order reference, amount and currency, receipt or invoice number, your email and the billing name you give. Your card details are entered on the payment provider’s own page (Paystack) and never reach us. | To sell, invoice and refund, and to keep our accounts. | Contract and legal obligation |
| Your organisation | If your employer enrols you, its managers can see your name, email, progress, results and the timings of your attempts. They cannot see the words you wrote. | So it can manage its training. | Your organisation’s instructions and legitimate interests |
| Sponsor banners (only if one is shown) | How many times each banner was shown and clicked, in total for each day. Nothing about who saw or clicked it. | To report to the sponsor and decide what to show. | Legitimate interests |
| Messages to us | The name, email, organisation and message you send through the contact form, and any email you send us. | To reply to you. | Legitimate interests, and your request |
| Faculty applications | If you apply to join our faculty: your name, email, LinkedIn address, country, current role, the fields you could review, the credentials and experience you describe, why you applied, your availability and any conflicts you mention. We keep a private note of our assessment and which checks we have made. | To assess your application, to check your credentials with the issuing bodies, and to reply to you. | Your request to be considered, and legitimate interests. We keep it for up to 12 months unless you are appointed, and delete it sooner if you ask. |
| Faculty and reviewers | Name, position, organisation, photo and an optional profile link, shown on this website. | To show who reviews our lessons. | Their agreement |
| Security and abuse prevention | A scrambled form of your IP address, kept briefly, to limit repeated certificate checks and contact-form messages; records of actions in the academy (for example a result marked or a certificate issued); and the ordinary server logs of our web host. | To keep the service secure and prevent abuse. | Legitimate interests |
Artificial intelligence and your words
Two features use an AI service: the AI instructor, which answers questions about a lesson, and the boardroom simulation, which plays the board members and assesses your replies.
- What is sent. The question or reply you write, the lesson or scenario text needed to respond, and the earlier messages in that conversation. We do not send your name, email address or account details.
- Please do not enter confidential details about real people or real organisations in your questions and replies. The scenarios are fictional, and you do not need real details to take part.
- Your agreement. Before you use either feature you are asked to agree that what you write is stored, processed by an AI service and may be read by faculty. If you do not agree you can still read the lessons. You can withdraw your agreement at any time by writing to support@brandsclass.com; after that you cannot use those two features.
- The provider. We use Anthropic’s business API (the Claude models). Under its published commercial terms, content sent through the business API is not used to train its models by default, and the provider keeps content only for a limited time under its own terms. See its privacy policy.
- How assessment works. The AI scores your replies against a marking guide that you can read before you begin. A faculty member checks any result that is close to the pass mark or unusual before you see it, and you can appeal a result. If you answered by voice, a delivery reading (pace, pauses, hesitation and volume) can add or take away a few points: at most 5 points either way. It can never decide a pass or a fail on its own: if it could, a faculty member decides. You can ask that it does not count. The assessment decides only whether you pass that exercise.
- Spoken answers. If you speak, only the text of what you said goes to the AI service, exactly as if you had typed it. The AI does not receive audio, and it does not receive your delivery numbers: our own software works those out. See Speaking your answers.
- Read-aloud. The read-aloud voice uses the voices on your own device. Nothing is sent to a voice service.
Speaking your answers
In the boardroom simulation you can reply by speaking instead of typing. It is optional, and typing always works.
- Your microphone. Only the simulation page asks your browser for permission to use it. Your browser shows when the microphone is on, and you can switch it off in the browser at any time.
- Who turns speech into text. Your browser, using its own speech service: usually Google in Chrome, Microsoft in Edge and Apple in Safari. Your speech goes from your device to that service, not through us, and their privacy terms apply to it. We do not control them. If you would rather not use them, type your answers.
- What we never do. We do not record, receive, store or listen to your audio.
- What we keep. The text you send, as for any reply, and the measurements listed in the table above. We delete the answer-by-answer measurements after 365 days, with your conversation. A short delivery summary (your delivery score, its four readings, and how many points it added or took away) is kept with your result, like the rest of the result.
- What delivery does. It is shown to you on your result, with advice. It can change your score by at most 5 points, up or down, and it can never pass or fail you on its own. A faculty reviewer sees it only when they review a result. It does not measure your accent or the quality of your English: how well the speech engine understood you is used only to give you advice, and it never changes your score.
- Your choices. Type instead at any time. Ask that your delivery does not count toward your score (a box before you first speak, and in the voice settings), and you still get the feedback. Withdraw your agreement by writing to support@brandsclass.com.
- Your organisation, if it enrolled you, sees what it sees for any simulation: your results, never your words, and never audio.
Certificates and public checking
- You confirm the name printed on a certificate.
- Anyone who has a certificate’s number or QR code can check it. A valid, visible certificate shows the holder’s name, the course, the level, the dates and the signers. It never shows scores.
- You can hide a certificate from public checking at any time. A hidden certificate looks exactly like a number that does not exist.
- Appearing on a public register of holders is your choice. It is never done for you.
- If a certificate is revoked, the check says so but never shows the holder’s name.
Who sees your data
- You.
- Faculty and reviewers, who may read your simulation conversation and questions to check a result or answer an appeal.
- Your organisation, if it enrolled you: your name, email, progress, results and attempt timings, not your words.
- Companies that help us run the service: Anthropic (the AI service); Paystack (payments: the provider handles your card details and is responsible for them); our web host and email delivery providers; and, if switched on, Microsoft Azure (read-aloud audio). They may use the data only to provide their service to us, except where they are responsible for it themselves, as Paystack is for payment details.
- Your browser’s speech service, if you answer by voice. It is not our supplier: your browser sends your speech to it directly, as described above.
- Sponsors, if a banner is shown, receive only totals: how often their banner was shown and clicked. They never receive anything about you. If you click a banner you go to the sponsor’s own website, which has its own privacy policy.
- Authorities, where the law requires it.
- A successor, if the academy is ever reorganised or transferred, who would have to protect your data in the same way.
We do not sell personal data, and we do not use it for advertising.
Cookies and your browser
- When you sign in, WordPress sets the cookies needed to keep you signed in and to protect forms. These are strictly necessary.
- This site loads no advertising or analytics trackers and no third-party scripts. A sponsor’s banner in the classroom is a picture we host ourselves, so it brings none with it.
- Your browser also remembers a few display choices on your own device (your read-aloud voice, whether captions or the 3D classroom are on, the language your microphone listens for, and whether the board is read aloud). They contain no personal data and you can clear them in your browser.
How long we keep things
| What | How long |
|---|---|
| Questions to the AI instructor, and simulation conversations | 365 days, then deleted automatically. |
| Spoken-answer measurements, answer by answer | 365 days, then deleted automatically with the conversation. The short delivery summary kept with your result stays with it. |
| Simulation results and certificate records | Kept, so that a certificate can always be checked. If you ask us to erase your data, the numbered record stays, marked revoked and without your name. |
| Orders and invoices | Kept for our accounts and as the law requires. If you ask us to erase your data, we keep the amounts and references but remove your email, your billing name and address, and the link to you. |
| Your account and progress | Until you ask us to delete them. |
| Sponsor banner counts | Kept as totals for each day. They contain no personal data. |
| Messages to us | For as long as needed to deal with them and keep a record. |
| Security and audit records | For as long as needed for security and accountability. |
Your rights
You can ask us to:
- give you a copy of your data (we can produce it in a standard export: lesson progress, questions, simulation conversations, results and orders);
- correct what is wrong;
- erase your data (this removes your conversations, results, progress and questions, removes your name from certificate records, your email and billing details from orders, and your email from seat records, and closes your account);
- limit or object to how we use it;
- stop processing that is based on your agreement, by withdrawing it;
- ask that your delivery, when you speak your answers, does not count toward your score;
- give you human review of a result, and decide an appeal.
Write to support@brandsclass.com from the email address on your account. We may need to check it is you. We aim to reply within one month.
Data sent abroad
Our AI provider, and some of our other providers, may process data outside the country you are in, including in the United States. If you answer by voice, your browser’s speech service may also process your speech outside your country. When we send personal data abroad we use providers that offer contractual protections for it.
Keeping data safe
The site is served over HTTPS. Passwords are stored scrambled. Our secret keys are stored encrypted. Access to personal data inside the academy depends on a person’s role. No system is perfectly secure; if you think something is wrong, tell us straight away at support@brandsclass.com.
Children
BrandsClass is for adults aged 18 and over. We do not knowingly collect data from children.
Changes to this policy
When we change this policy we change the date at the top. If a change affects how your data is used, we will tell you by email or on the site, and ask for your agreement again where the law requires it.
Contact and complaints
Questions or requests: support@brandsclass.com. If you are not happy with our answer, you can complain to the data protection authority in your country, for example the Nigeria Data Protection Commission or Ghana’s Data Protection Commission.