Privacy Policy

This Privacy Policy applies to masteriam.com, MASTER IAM memberships, learning content, the curated job board, Guided support, newsletters, and related services (collectively, the “Services”). MASTER IAM is operated from Montréal, Québec, Canada.

The Privacy Officer, MASTER IAM, is responsible for our privacy practices. Questions, complaints, and requests can be sent to youcef@masteriam.com.

Depending on how you use the Services, we may collect:

• Account information: name, email address, profile image, authentication identifiers, and account settings provided through Clerk or a connected sign-in provider.
• Learning profile: your self-reported IAM experience level, intended career-transition timeframe, and the date you completed onboarding. These answers are stored with your Clerk account in server-managed private metadata.
• Membership and billing information: Stripe customer identifiers, subscription or one-time payment and checkout identifiers, selected plan, monthly or lifetime membership status, renewal or cancellation status, refunds, disputes, and transaction records. MASTER IAM does not receive or store your complete payment-card number.
• Communications: questions, replies, and other content you submit through Guided support or by email.
• Waitlist and newsletter information: your email address, signup source, and signup date. Our resource forms ask for your agreement to receive IAM resources and MASTER IAM program updates. A repeat signup may keep your first signup source.
• Technical information: IP address, browser and device information, request logs, timestamps, security events, and cookies or similar storage needed for authentication, preferences, and service operation.

We do not intentionally collect government identifiers, health data, biometric data, or payment-card details through MASTER IAM forms. Do not include sensitive personal information in Guided support messages.

We use Vercel to measure aggregate page visits and performance. We remove query strings from analytics page URLs and exclude administrative and private support detail paths. Campaign labels from tagged links are remembered in session storage for the current browser tab and can be attached to newsletter subscriptions and checkout sessions. We do not send email addresses, payment details, or learner profiles as analytics event properties.

We use personal information to:

• create, secure, and administer accounts;
• process subscriptions and one-time purchases and maintain membership access;
• deliver courses, the job board, and Guided support;
• understand learners’ starting points and goals through onboarding answers;
• respond to questions and provide customer service;
• provide the free IAM skills kit after signup, send requested IAM resources and program updates, and manage communication preferences;
• operate, troubleshoot, protect, and improve the Services;
• measure aggregate page visits and loading performance with Vercel Analytics and Speed Insights;
• prevent fraud, abuse, and unauthorized access; and
• meet accounting, tax, contractual, and legal obligations.

When you choose Google sign-in, we use the basic profile and email information provided through Clerk to identify you, link your account, and support sign-in. Google sign-in does not give MASTER IAM access to your Gmail messages or Google Drive files.

We will request additional consent before using personal information for a materially different purpose when applicable law requires it. We do not sell or rent personal information, and we do not use it for third-party behavioural advertising.

We disclose only the information reasonably required for providers to perform services for MASTER IAM. Our principal providers include:

• Clerk for authentication and account management;
• Stripe for checkout, subscriptions, billing, fraud prevention, and the customer portal;
• Neon / Databricks for application database hosting;
• Vercel for website hosting, media delivery, and operational logs;
• Brevo for managing our mailing list, sending email communications, and handling email unsubscribe preferences. Contacts may be transferred from our website contact list manually or through a configured integration; and
• Google / YouTube for Google sign-in and external video links, including the IAM skills walkthrough. Videos linked from our public pages and resource kit open on YouTube. If you follow a YouTube link, Google processes information such as your IP address and playback activity under its own privacy practices.

We may also disclose information when required by law, to protect the rights and security of users or the Services, to investigate fraud or abuse, or as part of a business transaction subject to appropriate safeguards. Job applications occur on third-party websites and are governed by those websites’ own privacy practices.

MASTER IAM and its providers may process or store personal information outside Québec or Canada, including in the United States. Information processed in another jurisdiction may be subject to that jurisdiction’s laws and lawful access requests. We assess service providers and use contractual, organizational, and technical safeguards appropriate to the information and the services they provide.

The Services use cookies and local browser storage that are necessary to keep you signed in, protect sessions, remember interface preferences, remember whether you dismissed an offer, and keep resource access available after signup. The resource-access cookie lasts up to 30 days and does not contain your email address. Payment and authentication providers may also use their own security and fraud-prevention cookies.

Our resource walkthrough uses an external YouTube link rather than an automatically loaded embedded player. If you choose a YouTube link, YouTube may use its own storage and process playback information on its site. MASTER IAM does not otherwise use third-party behavioural advertising cookies. Blocking necessary cookies may prevent sign-in, checkout, or member features from working correctly.

We retain account and membership information while your account is active and for a reasonable period afterward. Billing and transaction records may be retained longer when required for tax, accounting, chargeback, fraud-prevention, or legal purposes. Waitlist information is kept until you unsubscribe or ask us to remove it. Guided support messages are retained while needed to provide support, resolve disputes, and protect the Services.

We use access controls, encryption provided by our hosting and payment providers, authentication controls, environment separation, and other reasonable safeguards. No method of transmission or storage is completely secure. If a privacy incident creates a risk of serious harm, we will provide notices required by applicable law.

Subject to applicable law, you may ask to access, correct, or obtain a portable copy of personal information we hold about you; withdraw consent where processing depends on consent; close your account; or request deletion of information that we no longer need to retain.

You can manage authentication information through your profile, manage billing through Membership Settings, and unsubscribe from marketing emails using the link in the message. To make a privacy request, email youcef@masteriam.com. We may verify your identity before completing the request, and legal exceptions may apply.

The Services are intended for adults and are not directed to children under 14. We do not knowingly collect personal information from a child under 14 without authorization required by law. If you believe a child provided information improperly, contact us.

We may update this policy as the Services or legal requirements change. We will publish the updated policy with a new effective date and provide additional notice when a change materially affects how we handle personal information.