Privacy Policy

1. Who We Are

aitrainer.work ("we," "our," or "us") is a professional career platform for the AI evaluation economy. We provide a verified AI Trainer Certification program, structured career resources, and curated role intelligence aggregated from leading AI evaluation platforms, helping skilled professionals find, qualify for, and advance in AI training work.

We do not employ workers, create job postings, or control hiring decisions at the platforms we feature. When you apply for a role through our site, you apply directly to the hiring platform, not to us.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily submit, including:

• Contact inquiries: Name and email address when you contact us
• Newsletter subscriptions: Email address for updates
• Job listing submissions: Company name, job details, and contact information when posting jobs
• Experience submissions: Pay rate, role category, platform name, currency, and optional written feedback when contributing to our community pay database
• Academy profile: Full name and country of residence, collected when you set up your Academy profile. Your full name is printed on your certificate.

2.2 Academy & Certification Data

When you use the AITrainer Academy, we collect and store:

• Account identity: Provided via Clerk (our authentication provider). We store your Clerk user ID and email address. Clerk processes your sign-in credentials under their own Privacy Policy.
• Exam purchase records: When you purchase the certified exam, we store a record of the Stripe session ID, your user ID, the number of attempts used, and whether you passed. We never store your card details — Stripe processes payments under their own Privacy Policy.
• Exam attempt data: The questions served to you (drawn randomly from our bank), the answers you submitted, your score, and per-module score breakdown. This is stored server-side and used to calculate pass/fail and provide feedback.
• Certificate records: Upon passing, we create a certificate record containing your name, issue date, score, and a unique verification ID. The PDF is stored in Cloudflare R2 object storage and is accessible via a public verification URL.
• Transactional emails: We send certificate delivery and payment confirmation emails via Resend. We store a log of whether the email was sent; we do not access email content after delivery.
• Geo-pricing: We use the IP-derived country code provided by Cloudflare's network (cf-ipcountry header) to determine local pricing for the exam. This is not stored; it is used only at the moment of pricing calculation. If you have set a country in your profile, your profile country takes precedence.

2.2 Information Collected Automatically

When you visit our site, we automatically collect:

• Usage data: Pages viewed, time on site, referring URL, and search queries
• Device data: Browser type, operating system, screen resolution, and language preferences
• Network data: IP address and approximate geographic location (country/region level)

2.3 Spam Prevention Data

To prevent abuse of our experience submission forms, we collect and store a one-way cryptographic hash of your IP address. This hash cannot be reversed to reveal your actual IP address but allows us to enforce rate limits (one submission per platform per day) and detect spam patterns.

We also use Cloudflare Turnstile for bot detection. Turnstile analyzes browser signals (such as mouse movements and page interactions) to distinguish humans from bots without traditional CAPTCHA challenges. Cloudflare processes this data under their Privacy Policy.

3. How We Use Your Information

3.1 Operating the Platform

• Display job listings and platform profiles
• Process and respond to contact inquiries
• Send newsletters to subscribers (with opt-out in every email)
• Improve site functionality based on usage patterns

3.2 Community Pay Data

Experience submissions (pay rates and feedback) are reviewed by our team before publication. Once approved, this data is displayed in aggregated form on platform pages—for example, "Median rate: $32/hr based on 47 submissions." We do not publish individual submissions in a way that identifies the contributor.

We require a minimum of three submissions per platform before displaying aggregated statistics, reducing the risk of re-identification.

3.3 Preventing Fraud and Abuse

• Detecting and blocking spam submissions
• Enforcing rate limits on form submissions
• Identifying coordinated manipulation attempts
• Maintaining data quality through manual moderation

3.4 Affiliate Disclosure

Many job links on aitrainer.work contain affiliate or referral codes. When you apply through these links and are subsequently hired, we may receive a commission from the hiring platform. This commission comes from the platform—not from you—and does not affect your pay rate or employment terms.

We disclose affiliate relationships in compliance with FTC guidelines.

4. Information Sharing

We do not sell your personal information. We share data only in these limited circumstances:

4.1 Service Providers

• Cloudflare: Content delivery, DDoS protection, Turnstile bot detection, D1 database (exam and certificate records), R2 object storage (certificate PDFs), and Workers runtime
• Clerk: Authentication and session management for Academy accounts
• Stripe: Payment processing — we never see or store your card details
• Resend: Transactional email delivery (certificate emails, payment confirmations)
• Google Analytics: Website analytics (see Section 5)
• Tally.so: Form hosting for job submissions

These providers process data on our behalf under contractual obligations to protect your information.

4.2 Third-Party Job Platforms

When you click a job link, you leave our site and interact directly with the hiring platform (Outlier, Mercor, etc.). Any information you provide during their application process is governed by their privacy policy, not ours.

4.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or if necessary to protect our rights, property, or safety, or that of our users or the public.

4.4 Talent Pool

If you join the talent pool, your profile data — including your name, country, languages, experience level, certification status, and any CV you upload — may be shared with specific hiring platforms when we believe you are a strong fit for a role.

By joining the talent pool you consent to this. We do not seek separate confirmation before each introduction. We will contact you when a company responds or takes a next step, such as inviting you to apply or to an interview.

You may withdraw from the talent pool at any time from your profile page, and your data will no longer be used for introductions after withdrawal. See the Talent Pool Terms for full details.

5. Cookies and Tracking

5.1 Cookies We Use

• Essential cookies: Required for site functionality (session management, preferences)
• Analytics cookies: Google Analytics 4 collects anonymized usage data to help us understand traffic patterns
• Affiliate cookies: Third-party job platforms may set cookies to track referrals when you click job links

5.2 Managing Cookies

You can disable cookies in your browser settings, though this may affect site functionality. To opt out of Google Analytics specifically, install the Google Analytics Opt-Out Browser Add-on.

6. Data Retention

We retain different types of data for different periods:

• Experience submissions: Retained indefinitely to maintain accurate aggregated statistics. You may request deletion (see Section 8), though we may retain anonymized, aggregated data.
• IP hashes: Retained for 90 days for spam prevention, then deleted
• Newsletter subscriptions: Retained until you unsubscribe
• Contact inquiries: Retained for 12 months, then deleted
• Analytics data: Retained for 14 months by Google Analytics
• Academy profile data: Retained for the duration of your account. You may request deletion by emailing privacy@aitrainer.work.
• Exam purchase and attempt records: Retained for 7 years for financial record-keeping compliance. Score and attempt data may be anonymised on request but the payment record is retained.
• Certificate records: Retained indefinitely so the public verification URL remains valid. If you request deletion of your certificate, the public verification page will display "Certificate revoked" and the PDF will be removed from storage. Note: we cannot control whether third parties have already downloaded or saved your PDF.

7. Data Security

We implement appropriate technical and organizational measures to protect your information:

• All data transmitted over HTTPS encryption
• Database access restricted to authorized personnel
• IP addresses hashed before storage (one-way, irreversible)
• Regular review of access logs and security practices
• Hosting on Cloudflare's infrastructure with enterprise-grade security

No system is completely secure. While we take reasonable precautions, we cannot guarantee absolute security of data transmitted over the internet.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of personal data we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Request your data in a machine-readable format
• Objection: Object to certain processing of your data
• Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, email privacy@aitrainer.work. We will respond within 30 days.

8.1 California Residents

Under the California Consumer Privacy Act (CCPA), California residents have additional rights including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.

8.2 European Residents

If you are in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR). Our legal basis for processing is legitimate interest (operating and improving our service) and, where applicable, consent. You have the right to lodge a complaint with your local data protection authority.

9. International Data Transfers

We operate globally and use service providers based in the United States and other countries. When we transfer data outside your country of residence, we rely on appropriate safeguards such as standard contractual clauses or the service provider's certification under applicable data protection frameworks. By using our site, you acknowledge that your information may be transferred to and processed in countries with different data protection laws than your own.

10. Third-Party Links

Our site contains links to third-party websites, particularly job platforms. We are not responsible for the privacy practices, content, or legitimacy of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us at privacy@aitrainer.work and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we may also notify you via email or a prominent notice on our site. Your continued use of the site after changes take effect constitutes acceptance of the revised policy.