Your data is yours. We collect the minimum we need to run a free, welcoming developer community - and we're upfront about who we share it with, including our event sponsors.
Who we are
Global AI Community ("we", "us") runs free AI events, local chapters and the Global AI Weekly newsletter. We are the data controller for the information described here.
Information we collect
- Your email address - to sign you in (passwordless), send you the mails you ask for and contact you about essential responsibilities if you hold a chapter organiser role.
- Profile details you add - such as your name, city, timezone and social links.
- Event registrations and activity - the events you register for and attend, plus profile details an event organiser requires, such as your mobile phone or GitHub and LinkedIn profile links. The organiser can access the details collected for their event.
- Learning activity - courses you start, pages and modules you complete, final-test scores and attempt times, points earned, completion dates, the certificates issued to you and any badges issued. We store assessment outcomes, not the answers you selected. A certificate page is public to anyone with its link and shows your name, the course and the completion date. We ask search engines not to index certificate pages, preview images or PDFs. This does not make public certificate links private or prevent others from sharing them.
- Device sessions - for security we record each signed-in device (browser, approximate location from your IP, last-active time). You can review and revoke these at any time.
- Sign-in abuse diagnostics - when an IP address exceeds the one-time-code request limit, we record that address and the time of the blocked requests so administrators can investigate abuse.
- Security administration - we store temporary network limits and their reasons, the administrator who creates or cancels them, and operations email recipients and quota-alert delivery records. We use these for our legitimate interest in keeping sign-in available and preventing abuse. Administrators may open an IP lookup service to investigate a blocked address; the address is shared with that service only when they follow the link.
- Account status - whether your account is active or has been disabled by an authorized administrator.
- Partner account access - which partner organisations your account manages, when access was granted and which account granted it. Site administrators and accounts linked to the same partner can see your name and email to manage access. They cannot use partner access to view your event registrations or other private account information.
- Partner agreements - agreement dates, descriptions and contract PDFs uploaded by administrators, which may contain business contact details and signatures. We record the uploader's account ID and upload time, and audit agreement edits and download requests. Administrators and linked accounts for that partner can read descriptions and download contracts, including expired agreements. These records are not public.
- Messages you send us - support or contact requests.
- Chapter organiser roles - your Lead or Co-organiser assignments, name and email address, to manage essential communications about running your chapters.
How we use your information
- To sign you in and keep your account secure
- To enforce our Terms of Service and protect the community by restricting account access when necessary
- To let authorised partner accounts edit their organisation's public profile and manage its linked accounts
- To register you for events and manage tickets, badges and reimbursements
- To send transactional emails (your one-time code, a one-time account welcome, registrations) and, if you opt in, the newsletter
- To send essential chapter operations messages to chapter leads and co-organisers about their organiser responsibilities, separately from optional newsletters and promotions
- To understand aggregate traffic and improve the site
Legal bases (GDPR)
We rely on contract (to give you an account and event access), legitimate interests (to keep the service secure and improve it), and consent - for the newsletter and for sharing your details with an event's sponsors - which you can withdraw at any time.
Partner account associations are used to provide the management service and keep access secure, on the bases of contract and legitimate interests. They are not published on partner profiles or used as consent for sponsor marketing. When your account is deleted, we remove its partner access and identifying grant attribution. Organisation profiles are public only while the partner has an active agreement with an uploaded contract.
We process partner agreements to administer our contractual business relationships, relying on contract where applicable and legitimate interests in managing and documenting those relationships and protecting access. Contracts are stored privately in Microsoft Azure. Agreements, contracts and associated account-ID audit records are retained after expiry until an administrator explicitly deletes the partner and its contracts. Deleting an individual member account removes access but does not delete the organisation's agreement records. You can contact privacy@globalai.community to request access, correction, deletion or restriction of personal information in a contract.
Essential chapter organiser communications
If you are a Lead or Co-organiser of an open chapter, we use your name and valid email address through MailerLite to send essential messages about running the chapter. MailerLite processes this information on our behalf. We rely on our legitimate interest in coordinating chapter operations within our organiser relationship with you, not on marketing consent.
This operational list is based on your organiser role. It includes existing, non-anonymised accounts even if account setup or Terms acceptance is incomplete, account access is disabled, or a previous chapter newsletter preference was off. Volunteers and members who only join a chapter are not included on that basis. When you no longer hold a qualifying role on any open chapter, we remove your membership of this operational list.
These messages are not newsletters or promotions. Holding an organiser role or accepting our Terms does not give consent to marketing. Marketing newsletters remain optional and require a separate opt-in. We respect existing MailerLite unsubscribe and suppression statuses and do not force resubscription. You can unsubscribe from these emails and contact us to object to or restrict processing, or exercise the other rights below. Removal from this list does not delete your MailerLite subscriber record or change your other subscriptions.
Analytics
We use Plausible Analytics, which is cookieless and collects no personal data. See our Cookie Policy for details.
Event sponsors
Our events are free because sponsors support them. When you register for a sponsored event, we share your registration details - such as your name, email address and (if you provide it) company - with that event's sponsor(s). Sponsors act as independent data controllers and may contact you about their products or services.
We name the sponsor(s) on each event page and ask for your agreement when you register. You can decline sponsor contact at registration, and you can ask us or a sponsor to stop contacting you or delete your details at any time.
Service providers
We also use a small number of trusted processors who handle data strictly on our behalf:
- MailerSend - delivers our transactional email, including your one-time sign-in code and account welcome. For verification and welcome emails, we disable open and click tracking and the provider's stored message-content preview. Your welcome email uses your first name and may invite you to subscribe to Global AI Weekly if you have not already opted in. It does not subscribe you automatically. Its founder portrait is a public website image without a per-recipient tracking identifier. Completed welcome-delivery job records are removed after 30 days; unresolved failures are retained until investigated.
- MailerLite - processes your name and email to deliver essential chapter organiser communications and, separately, optional marketing newsletters you opt into.
- Cloudflare - bot protection (Turnstile) and content delivery.
- Microsoft Azure - hosting and data storage.
How long we keep it
We keep your account data while your account is active. If you verify your email address but do not finish setting up your account, we delete the incomplete account and its sign-in security data after 30 days, unless it has community activity or records that need to be retained. Device sessions expire or can be revoked by you. Scheduled cleanup removes one-time-code abuse diagnostics and quota-alert records after 7 days, and temporary network limits 7 days after expiry or cancellation. Cleanup can be delayed by a service outage. Operations email recipients remain configured until an administrator removes them.
We apply newsletter preferences in the background. Temporary sync records include your account ID, the original email address, provider subscriber ID and status, and progress and retry information. We remove email addresses and provider identifiers when a sync completes successfully or is replaced, and schedule deletion of sync records after 7 days. The original address may remain during retries after an email change or account deletion so we can remove its newsletter subscriptions. A service outage can delay cleanup.
When a badge is issued to your email address for you to claim with a code, we may send transactional reminders after 3, 14 and 30 days. If the badge remains unclaimed, we delete the issued badge, claim code and recipient details 60 days after it was issued. Badges you claim remain part of your community record.
You can delete your account at any time from your profile page. When you do, we anonymise your account: your name, email, profile details, social links, active sessions and messages are removed, and you are unsubscribed from our newsletters. Records that must stay for others to make sense (your event attendance and any badges you earned) are kept but shown as “Deleted user”. This is permanent and cannot be undone. Financial records such as reimbursement requests are retained where we're legally required to keep them for accounting and tax purposes.
Your rights
You can ask us to:
- Access a copy of your data, or export it
- Correct or delete your data (you can delete your account yourself from your profile)
- Object to or restrict certain processing
- Withdraw consent (e.g. unsubscribe)
- Complain to your local data-protection authority
Security
Sign-in is passwordless (a one-time code), auth cookies are encrypted, and each account is limited to five active device sessions that you can revoke.
Children
The community is intended for people aged 16 and over. We don't knowingly collect data from children under this age.
Changes
We'll post any changes here and update the "last updated" date above.
Contact
Email privacy@globalai.community. See also our Cookie Policy and Terms of Service.