PRIVACY · AI AGENT SCHOOL
AI Agent School Privacy Policy
Effective and last updated：
This policy applies to AI Agent School, provided by FireGenesis LLC, including course reading, videos, Google sign-in, project-plan downloads, purchases and community features at agentschool.lifecheatslab.com. This page describes this application directly; it is not a substitute link to a generic policy on another website.
Google sign-in identifies your learning account and membership. We do not receive your Google password or request access to Gmail messages, Google Drive files, contacts or calendars.
1. Service provider and contact
FireGenesis LLC is responsible for this service and its data handling. Address: 30 N GOULD ST STE R, SHERIDAN, WY 82801, United States. For privacy, account or purchase requests, email support@lifecheatslab.com.
2. Data received through Google sign-in
When you choose Google sign-in, Google OAuth and Supabase Auth provide the basic data needed for authentication: your Google account identifier, email address and verification status, and basic profile information supplied by Google, such as your name and profile picture. The permissions are openid, email (userinfo.email) and basic profile (userinfo.profile).
We use this data to create and identify your school account, maintain sign-in, associate purchases and progress with the correct member, and handle account support and security verification. Authentication uses authorization codes, tokens and school session data; these are credentials for the authentication flow, not your Google password. We do not use this sign-in authorization to access email messages, Drive files, contacts, calendars or your private YouTube data.
You can read public content without signing in. Member-only courses, personal progress and purchasing require a verifiable account.
3. Other information you provide or generate
Webinar registration: we store your submitted email, session, optional survey, marketing preference, acquisition information and delivery status. Our n8n workflow and instructor Gmail send the booking notice; access, reminders and replay notices are arranged separately. Attendees do not grant Gmail access or confirm by email. Marketing is optional. The agent_school_webinar_oppref cookie retains an ad click reference for 30 days; only a newly saved registration generates a server-side OpenAI conversion. Where measurement is permitted, events include a SHA-256 hash of our signature-verified first-party journey identifier to connect booking, signup and purchase measurement, never its raw value or the raw member ID. The updated form links to our webinar booking and data use terms. When tracking settings permit, new bookings automatically include a trimmed, lowercased SHA-256 hash of the email submitted in that form for OpenAI matching. Raw emails, survey answers and Google OAuth profile data are not sent. Hashes remain matching identifiers, not fully anonymous data. Existing refusals remain effective and earlier registrations are not backfilled. GA4 receives booking and survey completion events without email hashes or answers. Declining tracking does not prevent registration.
Membership and learning: your school account identifier, membership tier and grant source, completion status and timestamps, download request counts and times needed for rate limiting, and profile information you choose to enter, such as a display name, biography, contact details or project links. Where your tracking choices allow, we also record your learning activity on the school: which lessons and previews you open, how far you play videos, time spent on pages, the days you return, and whether you view the pricing page or start checkout.
Transactions: purchased plan, amount, currency, quote, payment and refund status, timestamps, and customer, checkout and transaction identifiers and fulfillment event data returned by Stripe. Card information is processed in Stripe’s payment interface; the school does not store full card numbers or security codes.
Community and communications: when you voluntarily link Discord, we process your Discord user identifier, username, binding status and role-grant status, not your private messages. Joining a waitlist or contacting support involves the email, message and related material you provide.
Technical information: the website and its service providers may process IP addresses, browser and device information, request paths, timestamps, errors and security logs to deliver pages, troubleshoot and prevent abuse. Reading an Agent lesson does not automatically give this website access to files, code, Agent conversations or model keys on your computer. Do not submit passwords, tokens or unnecessary confidential information.
4. How information is used
We use this information to authenticate accounts, authorize lessons and downloads, synchronize completion progress, fulfill purchases and upgrades, reconcile payments and disputes, provide eligible community access, respond to support and requested notifications, and keep the service secure and operational.
Member email and course updates: we use your member email to send course information such as lesson updates, new lessons and previews, live sessions and plan offers, and we may use the learning activity described above (for example which lessons you viewed or completed, whether you returned, or whether you viewed the pricing page) to choose content that is more relevant to you. Every course-update email includes an unsubscribe link; after you unsubscribe we stop sending these emails. This does not affect your account, purchased content, or service notices such as payment and account security messages. You can also ask us to stop by writing to support@lifecheatslab.com.
If public profiles, projects or leaderboards are enabled, they display only information you provide and make public as described in those features, not your Google sign-in email, transaction records or private learning progress. Other people may copy information you publish.
5. Sharing and service providers
We share information only as needed to provide the service. Supabase provides authentication, the membership database and private storage. Vercel runs and hosts the website. Cloudflare provides enabled domain and DNS services. Their role does not grant arbitrary access to other content in your Google account.
Stripe processes payments, refunds and transaction risk, receiving necessary membership or transaction identifiers and email during checkout. Discord processes linked accounts and community interactions when you use those features. Loading a YouTube embedded player sends connection, device and playback request information to Google/YouTube. Those providers also apply their own privacy policies to information they obtain directly.
Kit, our email delivery service, receives your email address, name and list tags to send course-update emails and process unsubscribes. It does not receive your payment details or Google sign-in credentials.
We do not disclose your personal data to unrelated third parties except for sharing you request or consent to, necessary service processing, legal obligations, or fraud and security investigations. A business transfer affecting the responsible data handler would be subject to applicable notice and consent requirements.
6. Limits on Google user data
We comply with the Google API Services User Data Policy, including applicable Limited Use requirements. Data obtained through Google sign-in is used only for the account, membership, course-update email and security purposes described here. We do not sell or rent that data, provide it to data brokers, use it for personalized advertising, or use it to train general-purpose artificial intelligence models.
Access by personnel or service accounts is limited to necessary maintenance, support you request, security investigations or legal obligations. Before collecting additional Google data or using it for a new purpose, we will update our disclosures and obtain additional authorization when required.
7. Cookies, browser storage, video and analytics
We use cookies or session data for sign-in and security, and may store language or display preferences and purchase-event deduplication markers in your browser. You can remove or restrict browser storage, but may need to sign in again and some features may not work.
Videos use YouTube’s privacy-enhanced embed mode. This does not mean no data is sent to Google: loading or playing the embed still connects to YouTube and is subject to Google’s policies and your account and browser settings.
The application supports Google Analytics 4 and Meta Pixel when enabled by deployment configuration; without configuration, those scripts are not loaded. When enabled, they may receive page-view, sign-up, purchase or download events, transaction identifiers, and browser/device information for measurement. This is separate from Google sign-in: we do not send OAuth-derived names, emails or profile pictures to advertising platforms for personalized advertising. Where prior consent is legally required, it must be obtained before non-essential tracking is enabled.
On the production site, deployment configuration may enable OpenAI ad measurement for public page views, new account registrations, successfully created checkouts and fulfilled payments. Events include the plan, actual amount, currency and a transaction reference without a name. The Pixel stores an ad-click reference in __oppref (30 days after writing) and a browser reference in __obref (365 days after creation). The site also retains the latest ad-click reference in agent_school_webinar_oppref for 30 days. These references may accompany server-side registration and payment events sent to OpenAI, with registration event identifiers that do not contain the raw member ID; we do not forward them to Google Analytics. No configuration means no OpenAI tracking, and the test site does not send production events.
We honor browser Do Not Track, Global Privacy Control and stored OpenAI Pixel denials; a denial prevents new advertising measurement events. The Pixel's automatic advanced matching may normalize supported customer information and hash it with SHA-256 in the browser for conversion matching. We do not manually add OAuth profile data. All OpenAI events opt out of future user-level personalization.
8. Storage, international processing and security
Membership and learning records are primarily stored with Supabase; Vercel and other providers process website requests. Authentication, video, payment and community data may be processed by providers in different countries. Data is not guaranteed to remain only in your country or on your device.
We use HTTPS, server-side authorization, database row-level access controls, private file access and limited administrative permissions to reduce unauthorized access. No network service can guarantee zero risk. Protect your Google account and devices and do not share sign-in credentials.
9. Retention and deletion
We retain account, entitlement and learning records for as long as needed to provide the service, until deletion is requested or retention is no longer necessary. Necessary transaction, refund or dispute records may remain for contractual, accounting, tax, fraud-prevention or legal obligations after a learning account is deleted.
Technical and security logs are retained according to operational needs and provider settings. Backup copies expire through backup rotation and may not disappear immediately with primary records. Information retained for a necessary obligation is restricted to that purpose.
Requests are handled by support, not an existing one-click self-service deletion feature. Email support@lifecheatslab.com with the subject “AI Agent School — personal data request”, your membership email and the information you wish to access, correct, receive a copy of or delete. We verify ownership, explain any necessary retention, and handle requests within applicable legal deadlines. Do not include passwords, verification codes or full card details.
10. Your choices and revoking Google access
You can update supplied profile details in your member area and contact support to request access, correction, a copy, restriction of certain uses or deletion. Rights and retention exceptions depend on applicable law.
You can remove AI Agent School’s connection or authorization in your Google Account’s third-party connections settings. Revocation does not automatically delete school accounts, orders or progress and is not the same as signing out all existing school sessions. Sign out separately and contact support for account or data deletion. Deleting an account may end access to purchased content and progress; we will confirm the request with you. Data deletion is not a refund.
11. Policy updates
We update this page as the service and data practices change and show the latest date. Material changes will be communicated through the site or another appropriate channel. New purposes or permissions requiring consent will be explained and authorized before use. This policy does not limit rights protected by applicable law.