Your information
Privacy policy
Last updated 21 September 2026
Who is responsible for your information
Live AI School is operated by Sarah Pagel. Live AI School is the data controller for personal information collected through this website, the learning area and our own communications. Email learn@liveaischool.com with privacy questions or requests.
Students using the Meta Ads MCP remain responsible for the people and lead data they collect through their own advertising. Live AI School processes the connected advertising data needed to provide the MCP service and applies the account, security and budget controls described below.
What we collect
- Contact and account details: name, email address, login and authentication records.
- Enrolment and payment details: course or membership, billing status, transaction identifiers and limited billing details. Community membership payments are handled by Skool and its payment providers. Stripe processes Meta Ads MCP subscriptions. We retain Stripe customer, subscription and checkout identifiers, payment status, paid-access dates and the linked ad account to provide billing and enforce one-account access. Live AI School does not store your card number.
- Learning and support: lesson progress, support messages, enquiries, survey responses and information you choose to send us.
- Lead and email records: email preferences, consent date, signup source, list membership, campaign delivery, opens or clicks where enabled, bounces, complaints and unsubscribes.
- Website and device data: IP address, browser, device, pages viewed, referring URL and campaign parameters. Optional analytics and advertising data is collected only after consent.
- Meta Ads MCP applications: business or service name, website, intended use and optional Skool profile.
- Connected Meta data: Facebook user ID, approved ad account, Page, Instagram account, Pixel or dataset, audiences, forms, campaigns and other advertising objects selected or created through the service.
- Security and operational records: encrypted Meta access tokens, one-way hashes of MCP keys, access logs, validation results, rate-limit and error information.
When an authorised user requests leads from a connected Meta Instant Form, the MCP returns the lead payload to that user's authorised client. Live AI School does not intentionally add that payload to its application database unless a separate Live AI School lead-capture flow is being used.
How and why we use it
| Purpose | Typical lawful basis |
|---|---|
| Provide accounts, course access, requested resources, purchases and support | Contract or steps requested before a contract |
| Review applications and operate the Meta Ads MCP on the approved account | Contract and legitimate interests in providing and securing the service |
| Prevent misuse, diagnose faults, enforce access and budget controls | Legitimate interests and, where applicable, legal obligations |
| Keep accounting, transaction and compliance records | Legal obligation and legitimate interests |
| Send marketing emails or measure advertising and website behaviour | Consent, except where a lawful customer soft opt-in applies |
Where we rely on legitimate interests, we consider whether the use is necessary and balance it against your rights. Where we rely on consent, you can withdraw it at any time without affecting processing already carried out lawfully.
Cookies, pixels and similar technology
We use cookies, local storage, pixels, tags and similar technologies. Essential technology supports security, login sessions, OAuth connections, checkout and your saved privacy choice. Optional technology stays off until you consent.
| Category | What it does | Typical duration |
|---|---|---|
| Essential | Live AI School session and Meta OAuth cookies, fraud prevention, checkout and the las_consent preference cookie | Session to 180 days; account session up to 30 days |
| Analytics | Google Analytics helps us understand visits, pages used, approximate location, browser and device information. Google may set _ga and related cookies. | Up to two years, subject to browser and Google settings |
| Advertising | The Meta Pixel and Conversions API help measure whether ads lead to visits, registrations or purchases. This can include page URL, event, IP address, browser information, Meta browser identifiers and hashed contact information for a conversion. | According to Meta's applicable cookie and account-retention settings |
You can accept, reject or change optional categories at any time. Withdrawing consent stops future optional tracking on this site; it does not automatically remove information already held by a provider under its own retention rules.
Email and direct marketing
We use your email to deliver something you request, respond to you, administer your account and send service messages. These messages are separate from marketing. We send ongoing marketing when you have actively opted in, or where the limited customer soft opt-in is available and you were offered a clear opt-out when your details were collected.
Marketing choices are optional and unticked by default. Every marketing email includes an unsubscribe link. If you unsubscribe, we may keep the minimum suppression record needed to make sure we respect your choice.
Who receives information
We use providers that help us deliver the service, including Supabase for application data and authentication, Vercel and Cloudflare for hosting and security, Skool for community membership, Stripe for applicable service payments, Resend for email, Google for consented analytics, and Meta for consented advertising measurement and the optional Meta Ads connection. We disclose only what is needed for the relevant service and may also disclose information where required by law or to protect legal rights.
International transfers
Some providers may process information outside the UK or European Economic Area. Where data-protection law requires it, transfers use an adequacy decision, approved contractual safeguards or another valid transfer mechanism, together with appropriate supplementary measures where needed.
How long we keep information
- Account, enrolment and learning records are normally kept while the account is active and for a reasonable period afterwards to provide support and resolve disputes.
- Payment and accounting records are retained for the period required by tax and accounting law.
- Marketing records are kept until you withdraw consent or object; a limited suppression record may be kept afterwards.
- Meta connection data is kept while the connection is active and removed or invalidated after revocation or a verified deletion request, subject to security and legal records we must retain.
- Security logs are kept only as long as reasonably required to investigate incidents and protect the service.
We review retention when the purpose changes and delete or anonymise information that is no longer needed.
Security
We use access controls, encryption in transit, restricted service credentials, encrypted Meta tokens and one-way MCP-key hashes. No online service can guarantee absolute security, but we limit access and review technical safeguards in proportion to the information involved.
Your rights
Depending on where you live, you may have rights to access, correct, erase or receive your personal information; restrict or object to processing; and withdraw consent. You also have an absolute right to object to direct marketing. Email learn@liveaischool.com. We may ask for information needed to verify your identity.
You can complain to the data-protection authority where you live or work. In the UK, this is the Information Commissioner's Office. We would appreciate the chance to address your concern first.
Children
Live AI School is intended for adults in business and is not designed for children.
Changes
We may update this policy when the service or legal requirements change. The date above shows the latest revision.