Privacy

Who is responsible for your data

SEA AI Academy runs this platform and decides how the personal data described here is used. Our approach is guided by Malaysia's Personal Data Protection Act 2010. For any privacy question, email info@seaaiacademy.io.

What SEA collects

• Account details: your name, email address and sign-in method (email and password, or Google). If you sign in with Google, SEA receives the basic profile details Google shares for sign-in. SEA does not receive your Google password.
• Profile details you add during onboarding: your professional role, industry, department, experience level, the tools you use and the time you have for learning each week. Your language choice is also saved.
• Learning data: your goals, diagnostic answers and results, skill gaps, recommendations, learning progress, projects and the evidence you submit, including any files you upload with project work.
• Organization data: your organization membership and role, if you join one on SEA.
• Service records: product usage events tied to your account (for example, that you started a diagnostic), a record of emails SEA sends you, and security and administration logs.
• Payment records, once online payment opens: order and payment status. Card details are handled by the payment provider and are not stored by SEA.
• Messages you send us, for example when you email info@seaaiacademy.io.

Free text you write, such as a goal or evidence description, may contain personal information. Please avoid including sensitive details, such as health information or government ID numbers, unless a task clearly needs them.

How SEA uses it

• To run your account and keep you signed in.
• To build and adapt your personalized learning path.
• To review and verify evidence for your Skills Passport.
• To let authorized people in your organization see information within their role's scope.
• To send account emails, such as sign-up verification and password reset.
• To keep the service secure, reliable and free of misuse.
• To understand how the product is used so it can be improved.

AI processing, recommendations and profiling

Some features, such as interpreting a goal you type or personalizing a project, send the relevant text from SEA's servers to an AI provider. That text can include your goal wording and the professional role, industry, department and experience level in your profile. Your browser never talks to the AI provider directly. SEA asks the provider not to store these requests, and the provider may still keep limited records under its own terms. AI output is checked before SEA uses it.

Recommendations and learning paths are produced mainly by SEA's own rules, using your goal, diagnostic results and skill gaps. This is a form of profiling. It is advisory: it suggests what to learn next and does not decide your access, employment, grades or certification. AI can be wrong, so treat suggestions as guidance and check them against your own judgement. If you disagree with a result or want to know why it was shown, email us.

Who can see your data

Database access rules limit your learning records to you and to people with an authorized role, such as an evidence reviewer or an administrator of your organization. See Security for how this works.

Service providers

SEA uses these kinds of providers to run the service. SEA gives them data only for that purpose.

• Supabase: authentication and data and file storage.
• Vercel: hosting the application.
• An AI provider: the features described above, only when AI features are enabled.
• An email delivery service: sign-up verification, password reset and account emails.
• Google: only if you choose to sign in with Google.
• Stripe: card payments, once online payment opens. Stripe handles payment data under its own privacy terms.

Learning resources you open on Microsoft Learn or other providers are governed by that provider's own privacy terms. Linking to a provider's content does not mean SEA is endorsed by, or affiliated with, that provider.

SEA does not sell your personal data.

SEA may also disclose personal data where the law requires it, for example in response to a lawful order from a court or a public authority.

Where data is processed

These providers may store or process data in countries outside Malaysia. Where SEA transfers personal data abroad it aims to do so only as Malaysian law allows.

Cookies

SEA uses essential cookies to keep you signed in and a cookie to remember your language. See Cookies.

How long SEA keeps data

SEA has not yet set fixed retention periods. Your learning history is connected, so it is kept while your account exists and may be kept longer where records are linked to other records or where law or operations require it. Ask us what applies to your data.

Your choices and rights

You can ask to see your data, correct it, or ask for deletion, and you can withdraw consent where we rely on it. You can also complain to us, and you may contact Malaysia's Personal Data Protection Commissioner. See Your data for how requests work today, including what SEA cannot yet do on its own. For any other question, email info@seaaiacademy.io.

Changes to this notice

SEA will update this page when its practices change and show the date above. This notice is currently available in English only.