Privacy & cookies
Gaja Collective is an Ohio-licensed school with students in the United States, the EU, the UK, Canada and beyond. This page explains what we collect, why, and the choices you have. It is written to meet the GDPR, the UK GDPR, PIPEDA and US state privacy laws, and the Ohio State Board of Career Colleges and Schools record-keeping rules we operate under.
What we collect
- Account and enrollment records: name, email, phone (if you opt in to texts), time zone, city, your enrollment agreements, payments, attendance and lesson progress. We keep these as the school's student records for as long as the State Board requires.
- Learning activity: which lessons you complete and how far you got in each, where you paused a video, answers you save in an exam, reflections you save, questions you ask faculty or the learning assistant, and posts, comments and reactions you make in the community.
- Site activity once we know you: when you have an account, or have given us your details through a form, we keep a record of the pages you open on our own site, the forms you send, the emails we send you (and whether they were opened) and any you send back to us. Links in the emails we send you carry a key that tells our site it is you when you click through, so that visit is recorded on your record too; the key is removed from the address as soon as the page opens and is never added to links that leave our site. This is first-party data held by the school under the terms you accepted; it is how admissions and faculty follow up with you properly. It does not depend on the analytics cookie, which only covers the third-party statistics below.
- Technical data: sign-in events, IP address and browser type in security logs.
Cookies
- Essential (always on): Sign-in session, security, your cookie choice, and remembering your timezone. Always on.
- Analytics: Page-view statistics (Google Analytics, through Google Tag Manager) that tell us which program pages and lessons people use, so we can improve them.
- Marketing: Ad-platform pixels (Meta, Google Ads) used to measure our campaigns and show relevant ads elsewhere. Never used inside your lessons.
Analytics and marketing tags (Google Tag Manager, Google Analytics, Google Ads, the Meta pixel) load only after you accept the matching category, and Google's consent signals are set to denied until then. If your browser sends a Global Privacy Control signal we treat it as an opt-out of sale or sharing: marketing cookies stay off unless you turn them on yourself. Your choice is kept with the date and the policy version you saw, and we ask again when this policy changes.
You can change your cookie choice at any time:
Your rights
You can ask for a copy of your records, correct them, or ask us to delete data we are not required to keep as student records. Email support@thegajacollective.com. Staff access to student records is logged.
Who sees your data
Gaja staff and your faculty (only for programs they teach). Service providers that run the platform: hosting (Vercel), database (Neon), email (Resend), texts (Twilio), video (Vimeo, Zoom) and payments (Stripe). With your consent, Google (Analytics, Tag Manager, Ads) and Meta receive the analytics and advertising signals described above. We do not sell personal data. The learning assistant only reads your course material and never shares your questions with an outside AI provider beyond the model service configured by the school.