Privacy Policy for QAi Talks
Last Updated: 24 February 2026
At QAi Talks, we are committed to protecting the privacy of our students and technical community. This policy outlines how we handle your personal data as you transition from a manual tester to a technical Software Development Engineer in Test (SDET) through our "Portfolio First" educational model and remote bootcamp.
1. Data Controller and Contact Information
QAi Talks [Insert Legal Entity Name] acts as the Data Controller for the personal data processed through www.qatraining.uk and our associated learning environments.
Data Privacy Lead: [email protected]
2. Data We Collect
Because we focus on a "Portfolio First" approach, we collect specific technical and professional data points required to verify your frameworks and career readiness.
| Category | Specific Data Points | Purpose of Processing |
|---|---|---|
| Identity & Contact | Full name, email, LinkedIn profile, professional background. | Enrollment, certification, and career coaching. |
| Technical Identity | GitHub Username, Bitbucket/GitLab handles. | To review your frameworks and track portfolio progress. |
| Financial Data | Payment card details, billing address (via Stripe). | Bootcamp tuition and course fees. |
| Competency Metrics | Quiz results, framework submissions, and AI-generated ATS scores. | To provide certification and track SDET competency. |
| Technical Telemetry | IP address, browser type, and interaction logs with our "demo apps." | Security and ensuring the stability of our testing environments. |
| Audiovisual Data | Video and audio recordings of mock interviews and live bootcamp sessions. | Training, performance review, and promotional showcasing. |
3. Lawful Basis for Processing
- Contractual Necessity: To deliver the bootcamp services and certification you have purchased.
- Recognised Legitimate Interests: Under Section 5 of the DUAA 2025, we process technical logs to detect, prevent, and investigate malicious acts or security breaches within our "real-world demo apps."
- Explicit Consent: We rely on your explicit, opt-in consent before uploading any mock interview recordings or identifiable bootcamp footage to public social media platforms.
- Consent: For showcasing your technical portfolio to our network of tech hiring managers or sending newsletters.
4. Mock Interviews and Social Media Distribution
As part of our remote bootcamp, we conduct mock interviews to prepare you for the SDET job market.
Public Showcasing: With your prior explicit consent, we may upload recordings of these sessions to social media and video-sharing platforms (including but not limited to YouTube, TikTok, and Facebook) to highlight student success and community progress.
Right to Withdraw: You may withdraw your consent for the public hosting of your interview at any time. Upon withdrawal, we will remove the content from our controlled channels within 30 days, though we cannot control data already "scraped" or shared by third-party users outside our platform.
5. AI and Automated Decision-Making (ADM)
Our platform utilises a multi-agent orchestration layer (powered by LangGraph) to analyse CVs and provide ATS scoring.
Logic Involved: Our AI benchmarks your technical submissions against real-world job descriptions to identify "Critical Skill" gaps.
Safeguards: In accordance with Section 4A of the UK GDPR, you have the right to request human intervention, make representations, and contest any significant decision made solely by automated means.
6. Third-Party Processors and Data Transfers
We do not sell your data. We share it with essential technical "Processors" and "Joint Controllers" (in the case of social media platforms):
| Provider / Category | Purpose | Data Transfer Mechanism |
|---|---|---|
| Oracle Cloud | Database and Compute (London Region) | UK-Resident Persistence. |
| Cloudflare R2 | Secure Document Storage | Jurisdiction-Restricted (EU/UK). |
| OpenAI API | AI-driven competency analysis | UK-US Data Bridge (DPF Certified). |
| Stripe | Secure Payment Processing | UK Extension to EU-US DPF / SCCs. |
| Vercel | Web Hosting and Delivery | Global CDN (DPF Certified). |
| Social Media Platforms | Public hosting of mock interviews (e.g., YouTube, TikTok, Facebook). | Platform-specific Terms & Privacy Policies. |
7. Your Rights
- Right of Access (DSAR): You may request a copy of your educational data and interview recordings.
- Right to Erasure: You may request the deletion of your account and the removal of public interview footage.
- Right to Complain: You must first use our Internal Complaints Form. We will provide a formal outcome before you escalate to the Information Commission.
8. Security of Technical Environments
We implement encryption at rest (AES-256) and in transit (TLS 1.3). Any attempt to use our "real-world demo apps" to scrape personal data or perform malicious acts is a violation of our terms and may result in data logging for security investigations.
9. Contact Us
For questions regarding this policy or to exercise your rights, please contact:
Data Privacy Lead
Email: [email protected]