Privacy Policy

Introduction

C.O.R.E. (Cyber Operational Risk Education) is a cybersecurity training platform and department of AI OWL. We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your information when you use the C.O.R.E. platform.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Platform.

Information We Collect

Information You Provide

Category	Data	Purpose
Account Information	Full name, email address, password (hashed)	Account creation and authentication
Organization Data	Company name, organization ID	Employer-sponsored enrollment
Training Progress	Lesson completion, quiz scores, activity results, final test scores	Track learning progress and issue certificates

Information Collected Automatically

Category	Data	Purpose
Device Information	Browser type, operating system, screen resolution	Platform compatibility
Usage Data	Pages visited, time spent, features used	Service improvement
Log Data	IP address, access timestamps, referring URL	Security monitoring

Information We Do NOT Collect

Social Security Numbers or government-issued IDs
Financial or payment card information
Biometric data
Precise geolocation data
Data from minors under 16 years of age

How We Use Your Information

Service delivery: Account management, course delivery, progress tracking, certificate issuance.
Communication: Registration confirmations, invitations, password resets, completion notifications.
Security: Fraud detection, unauthorized access prevention, security incident response.
Improvement: Usage analysis to improve content, features, and user experience.
Legal compliance: Compliance with applicable laws and regulations.

We do not use your personal information for targeted advertising, profiling, or automated decision-making that produces legal effects.

Disclosure of Your Information

We do not sell, rent, or trade your personal information to third parties.

Employer/Organization

If enrolled through your employer, your administrator may access your training progress, completion status, and scores. Administrators cannot access your password.

Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation.

Data Security

Encryption in transit: TLS 1.2 or higher for all data transmission.
Encryption at rest: Sensitive data encrypted in database storage.
Password security: Passwords hashed using bcrypt, never stored in plaintext.
Access controls: Restricted to authorized personnel on a need-to-know basis.
Row Level Security: Database policies ensure users can only access their own data.
Content Security Policy: HTTP headers prevent cross-site scripting and injection attacks.

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Cookies & Local Storage

Technology	Purpose	Duration
Supabase auth token (localStorage)	Maintain authenticated session	Session duration
Progress data (localStorage)	Track lesson and activity completion	Until cleared by user

We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

Your Privacy Rights

All Users

Access: Request a copy of your personal information.
Correction: Request correction of inaccurate data.
Deletion: Request deletion, subject to legal retention requirements.
Portability: Request your data in a machine-readable format.
Withdraw consent: Where processing is based on consent.

California Residents (CCPA/CPRA)

Right to Know: Request categories and specific pieces of personal information collected in the preceding 12 months.
Right to Delete: Request deletion, subject to certain exceptions.
Right to Opt-Out: We do not sell or share your personal information. No opt-out is necessary.
Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

Contact info@aiowl.org. We will respond within 45 days.

Other US States

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with privacy laws may have similar rights. Contact us to exercise any applicable rights.

International Transfers

The Platform is operated from the United States. If you access it from outside the US, your information may be transferred to and processed in the United States. For EEA/UK/Switzerland users, transfers comply with applicable requirements including Standard Contractual Clauses.

Terms of Service

Acceptance of Terms

By accessing or using the C.O.R.E. platform, a cybersecurity training platform and department of AI OWL, you agree to be bound by these Terms of Service. If you do not agree, you may not use the Platform.

If you are using the Platform on behalf of an organization, you represent that you have the authority to bind that organization to these Terms.

Eligibility

You must be at least 18 years of age.
You must provide accurate and complete registration information.
Employer-sponsored access is subject to both these Terms and any agreements between your employer and AI OWL.

Account & Security

You are responsible for maintaining the confidentiality of your account credentials.
Notify us immediately of any unauthorized use of your account.
You may not share credentials or allow others to access your account.
We may suspend or terminate accounts that violate these Terms.

Acceptable Use

You agree not to:

Copy, reproduce, distribute, or publicly display any Platform content without written consent.
Reverse engineer, decompile, or disassemble any part of the Platform.
Use the Platform for any unlawful purpose.
Attempt to gain unauthorized access to any part of the Platform or connected systems.
Use automated tools (bots, scrapers) to access the Platform.
Share, distribute, or publish quiz answers, test questions, or assessment content.
Misrepresent your identity or impersonate another person.
Interfere with the Platform's operation or security.

Intellectual Property

All content on the Platform — including lessons, videos, quizzes, activities, graphics, text, software, and design — is the exclusive property of AI OWL or its licensors and is protected by United States and international intellectual property laws.

You may access content solely for personal educational purposes. You may not reproduce, modify, distribute, sell, or create derivative works without express written permission.

"C.O.R.E.," "Cyber Operational Risk Education," "AI OWL," and associated logos are trademarks of AI OWL.

Certificates

Issued upon successful completion of all required coursework (lessons, videos, activities, final test).
Non-transferable and issued to the individual who completed the training.
Represent completion of the C.O.R.E. program — not a professional certification, license, or accreditation.
May be revoked if obtained through fraud, cheating, or violation of these Terms.

Employer Accounts

Your employer's administrator may view your training progress, completion status, and scores.
Your employer may remove your access at any time.
Access may be revoked upon termination of employment or the employer's contract.

Indemnification

You agree to indemnify and hold harmless AI OWL from any claims, liabilities, damages, and expenses arising from your use of the Platform, violation of these Terms, or violation of any law or third-party rights.

Termination & Availability

We may suspend or terminate your access at any time, with or without cause.
You may terminate your account by contacting us.
We do not guarantee uninterrupted access and may modify or discontinue any part of the Platform.
The Intellectual Property and Indemnification sections survive termination.