Second Brain cohort Live with me from 3 February: build your own second brain and your first AI employee. €447 until Friday 6 November. See the cohort →

Privacy Policy

Last updated: 17 May 2026

WHO WE ARE

  • Paloma’s AI Academy is the trading name of Dorota Mleczko, sole proprietor (VAT IT02860270996), registered in Genoa, Italy.
    Email: hello@palomasacademy.ai
  • We are the data controller for any personal data collected on this site.

WHAT DATA WE COLLECT (AND WHY)

  • Name and email — you provide these when registering for a webinar, course, or community membership.Legal basis: contract, to deliver the service you signed up for.
  • Payment information (card or PayPal details, billing address) — collected directly by Stripe or PayPal at checkout. We do not store your card details.Legal basis: contract, to process your payment.
  • Community activity (posts, comments, course progress) — generated when you use the Skool platform as a member of Paloma's AI Academy.Legal basis: contract, to deliver the community service.
  • Email engagement data (opens, link clicks) — tracked by GoHighLevel, our email platform.Legal basis: legitimate interest, to measure and improve our communications.
  • Phone number — provided voluntarily when opting in to SMS reminders on registration forms. Legal basis: consent. Used exclusively to send non-marketing service messages.
  • Website usage — we do not currently run active analytics tracking on our website.

SMS Communication Consent

By ticking the separate SMS consent checkbox on our registration form (unchecked by default), you consent to receive non-marketing customer care communications from Dorota Mleczko (Paloma's AI Academy) related to your interaction with our services. These communications may include:

  • Webinar reminders
  • Appointment reminders
  • Logistical updates
  • Reply link delivery
  • Customer support communication
  • Account-related notifications

These messages are strictly informational and non-promotional in nature. Message frequency varies. Message and data rates may apply. Consent to receive text messages is not a condition of registration or purchase.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

You may opt out of SMS communications at any time by replying STOP to any text message. Reply HELP for assistance, or contact hello@palomasacademy.ai. For the full Terms of Service, see our Terms of Service.

HOW WE USE YOUR DATA

  • Deliver access to courses, community, and live sessions
    Send transactional emails (receipts, reminders, access links)
    Send newsletters and product updates if you opted in
    Prevent fraud and maintain platform security
    Comply with legal and tax obligations.

DATA SECURITY PRACTICES

All data is transmitted over encrypted connections (TLS/SSL). Access to personal data is restricted to authorised personnel only.

THIRD-PARTY PROCESSORS WE RELY ON

  • Skool (USA) — hosts our online community platform. Your community profile, posts, and course activity are stored on Skool's servers. Skool processes this data on our behalf under their terms of service. Standard Contractual Clauses apply for EU data transfers.
  • Stripe (IE/USA) — processes card payments on our GHL checkout pages and on Skool's checkout. PCI-DSS compliant.
  • PayPal (USA) — processes PayPal payments on our GHL checkout pages.
  • GoHighLevel / GHL (USA) — our CRM, email marketing, and funnel platform. Stores your name, email, and purchase history. Standard Contractual Clauses apply.
  • All processors receive only the data needed for their specific service and are contractually required to keep it secure.

HOW LONG WE KEEP DATA

  • Account and community data — until you delete your account, or 24 months after your last login.
  • Order records and invoices — 10 years (Italian tax law).
  • Marketing email list — until you unsubscribe.

YOUR RIGHTS (EU GDPR)

  • You have the right to access, correct, delete, or export your data. You can also withdraw consent, restrict processing, or lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
  • Email hello@palomasacademy.ai and we’ll reply within 30 days.

COOKIES

  • We use only essential cookies required for site functionality. No optional analytics or advertising cookies are currently active.

CHANGES TO THIS POLICY

  • If we change this notice, we’ll publish the new version here and, if the changes are significant, email registered users.