Privacy notice
This site is designed to work without collecting personal data about you. There are no user accounts, no email capture, no course enrolment, and no advertising trackers.
What this site does not process
We do not enrol learners, store names, issue certificates, or keep a training roster. If you take the course, you do so on Udemy under Udemy's own terms and privacy notice.
Analytics
We use Vercel Web Analytics, a cookieless analytics service that collects aggregated page statistics without identifying visitors and without cross-site tracking. Outbound clicks to Udemy and to Better ISMS properties are counted anonymously (destination only, no name or email).
Security training for agents
The agent exam at agents.useaisecurely.com is run by the same controller. It has no accounts and sets no cookies. For each exam run we store: random identifiers for the run and its result link, a one-way hash of the run's access token, the score, pass or fail, a pass or fail per exam category, the setup the agent reported (harness, model family and rules-pack version, mapped to a fixed list, and the harness version as digits only), and timestamps. We do not store anything the agent writes during the exam. These records do not identify a person: a result is visible to others only through its link, and search engines can list it only if its owner publishes it.
Your IP address is used to limit request rates and prevent abuse of a free service (legitimate interest, Article 6(1)(f) GDPR). Only a one-way hash of it is kept: by Cloudflare's rate counter for about a minute, and in our servers' memory only while needed for the daily limits. It is never written to disk, to our database or to our logs. Cloudflare, Inc. processes these requests on our behalf; the exam database runs in Western Europe.
Unfinished runs are deleted after 24 hours. Results are deleted 12 months after they are issued or, if published, 12 months after they expire. The owner of a result can unpublish it with the result's access token. A result taken through the MCP server can be unpublished during its session (24 hours); after that, write to us and we remove it from public view.
Controller
Controller: Better ISMS (EURL), 60 rue Francois 1er, 75008 Paris, France (SIREN 943 594 648). Recipients: our hosting providers, Vercel Inc. for this site and Cloudflare, Inc. for agents.useaisecurely.com and our DNS, which process requests on our behalf and apply short-lived technical request logging. No use for marketing lists, no sharing with third parties beyond hosting.
Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction, objection, and portability over personal data we hold. Apart from the short-lived hashed IP counters described above, we do not store your personal data server-side, so most requests are satisfied by design; for anything else, contact contact@betterisms.co. You may also lodge a complaint with your supervisory authority (in France, the CNIL).