TAI Labs — Become AI-Native

1. Who we are

SnapDrum Ltd (trading as The AI Internship) is the data controller for the theaiinternship.com website and the TAI Career platform. Contact: hello@theaiinternship.com, 124 City Road, London EC1V 2NX.

2. Data we collect

Category	Examples	Purpose	Lawful basis
Account	Name, email, role, career goals, profile details	Providing your account, personalizing plans and recommendations	Contract (Art 6(1)(b))
Career materials	CVs, cover-letter inputs, interview answers (text, voice, video), job applications you track	Operating the AI career tools you invoke (CV review, ATS check, mock interviews)	Contract
Payment	Last 4 digits of card, Stripe customer ID, billing address	Subscription and program payments, refunds, accounting	Contract; Legal Obligation
Learning data	Course progress, quiz results, certificates earned	Delivering courses and issuing verifiable certificates	Contract
Usage & device	Pages visited, feature usage, IP address, cookie IDs	Analytics, fair-use limits on free tools, security	Legitimate Interest
Marketing	Opt-in preferences, advertising cookie IDs	Newsletters, event invitations, measuring ad campaigns	Consent; Legitimate Interest
Business contacts	Work email, company, role (for team-training enquiries)	Responding to enquiries and delivering company programs	Legitimate Interest; Contract

3. AI processing

When you use an AI tool (for example CV review or the mock interviewer), the content you submit is sent to third-party AI model providers — currently Google (Gemini models) and Anthropic (Claude models) — to generate the response. These providers process the data as our processors under their API terms and do not use API data submitted by us to train their models per those terms.
We store your tool history (for example past CV reviews and interview feedback) in your account so the product can track progress and adapt — you can delete it via account deletion.
AI outputs are suggestions, not decisions. We do not use automated decision-making that produces legal or similarly significant effects about you.

4. Sharing and international transfers

Supabase (database & authentication hosting).
Stripe, Inc. (payment processing, USA).
Google and Anthropic (AI model processing, USA).
Netlify (website hosting), Resend (transactional email).
Maven (Maven Learning, Inc.) when you purchase a Maven-hosted program — Maven is an independent controller of the data you give it.
Analytics and advertising partners: PostHog (EU), Mixpanel, Hotjar, Meta, Google Ads, and LinkedIn (conversion measurement).
If your access is sponsored by your employer under TAI for Teams, your employer sees assigned-activity completion, work-related assessment outcomes, and aggregated usage — not your private career materials (such as personal CVs or external job applications).

Where data leaves the UK/EU, we rely on UK GDPR Art 46 Standard Contractual Clauses (including the UK Addendum) with the relevant provider.

5. Data retention

Account and learning data: for the life of your account; deleted on verified account-deletion request.
Payment and accounting records: 7 years (tax & audit).
Marketing data: until you unsubscribe or object.
Anonymous usage logs for free-tool limits: rolling 30-day window plus aggregate statistics.

6. Your rights

Access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to complain to the UK ICO (ico.org.uk). You can delete your account (and its data) from your dashboard settings or by emailing us.

7. Cookies

We use cookies and similar technologies for authentication, fair-use limits on free tools, analytics (PostHog, Mixpanel, Hotjar), and advertising measurement (Meta Pixel, Google Ads, LinkedIn Insight). You can control non-essential cookies via your browser settings; essential cookies are required for sign-in and checkout.

8. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse — including encryption in transit, role-based access controls, and row-level security on our database.

9. Changes

We'll post any privacy changes on our Website and, where appropriate, notify you by email. Data collected under the retired internship programme continues to be handled under the retention rules communicated to those participants.

Privacy Policy