Privacy & Data Policy

Last updated: 18 August 2026

I believe AI readiness starts with trust. My goal is to give you world-class assessment, learning and resources without the invasive tracking that has become normal on the modern web.

1. Who this policy covers — the AIFN ecosystem

This policy applies to all of the following websites and services operated by AI-First Nation (AIFN) | Laurence Liew (the “Ecosystem,” “we,” “our,” or “us”):

aifirstnation.org — the “AI-First Nation” book site, AIFN Insights newsletter & blog, and the LLX chatbot. Canonical home of these Terms.
airi.foundation — the open-standard home of the AIRI Framework.
aiready.sg — the learning platform (LMS), pAIRI/oAIRI assessments, courses, community, and support helpdesk.
airihub.io and any *.airihub.io subdomain — branded oAIRI organisational-readiness survey sites.
ai4sme.org – a site dedicated to SMEs to help them in their AI journey
hokkien.me – a fun site to learn about AI/ML
community.aifirstnation.org – the AIFN community site

Where a section below applies only to a specific site (for example, course-progress data only happens on aiready.sg), we say so plainly.

Non-affiliation: The Ecosystem is a personal initiative by Laurence Liew. It is not affiliated with, endorsed by, funded by, or a product of AI Singapore. All views, frameworks, and content are mine alone.

2. Our privacy philosophy

We do not sell your data. Not now, not ever.
We do not use third-party advertising trackers (no Meta Pixel, no Google Ads pixel, no social-media tracking).
We do not use Google Analytics. We run our own privacy-first analytics instead (Section 6).
We do not follow you across other websites or build an advertising profile.
Your assessment scores and learning progress are yours. We use them only to personalise your experience on the platform.

3. What we collect and why

3.1 When you just browse (no account)

When you visit any Ecosystem site without logging in, we record:

Pages viewed and the referral source that brought you (so we know what content is useful).
Approximate geographic location (country level, derived from your IP address).
The device type and browser you are using.

This is collected by Independent Analytics Pro, which stores the data locally on our own servers — nothing is sent to an external analytics company. IP addresses are not used to identify you personally.

3.2 Account registration

When you create a free account on community.aifirstnation.org (for community), aiready.sg (to assess and learn) or airihub.org (to setup your own AIRI assessment) we collect:

Data	Why we need it
Name	To personalise your dashboard, results, and emails
Email address	Your login credential and how we send information, results and course updates
Password	Stored as a salted hash — we never see or store your actual password
Industry	To contextualise your learning path with relevant examples
Functional role / tier	To tailor course recommendations to your level of responsibility
Company website (optional)	To understand the organisational context of your learning
Professional bio (optional)	To enable AI-powered personalisation of your learning experience

3.3 Assessment data (pAIRI and oAIRI)

On aiready.sg (individual): when you take the pAIRI (Personal AI Readiness Index) assessment, we collect your responses to each question, your computed pillar scores (P1–P5) and overall score, and your maturity-level classification (L0–L4). Scores are recalculated when you retake the assessment, and your previous scores are overwritten.

On airihub.io and *.airihub.io tenant sites (organisational): when you complete an oAIRI organisational-readiness survey, we collect the responses you submit, your role/department context (if the survey asks for it), and the computed organisational scores. Individual respondents’ raw answers are aggregated into the organisation’s result; we do not save nor expose one respondent’s answers to another. The organisation that owns the survey can only see the aggregated result.

3.4 Learning data (aiready.sg)

As you progress through courses, we record course enrolments and completion status, lesson progress and quiz results, certificates earned, and time of last activity (used to detect inactivity for nudge emails). This powers your student dashboard, makes course prerequisites work, and lets us recommend your next step.

3.5 Community participation (community.aifirstnation.org)

If you join the Community (powered by FluentCommunity), we store your community profile (display name, avatar), the posts, replies, and reactions you create, and your space memberships. Community contributions are visible to other logged-in community members. Your assessment scores are never shared publicly in the community.

3.6 Support and contact-us forms.

If you contact us through any contact form or the support helpdesk, we store your subject and message content, any attachments you upload, and our replies and resolution status. Support conversations are private between you and our support team.

3.7 Newsletter and lead magnets (all sites)

When you sign up — for the AIFN Insights newsletter, to download the AIRI Framework, the “AI-First Nation” book PDF, or any other lead magnet — we collect your name and email only.

Where we deliver a downloadable resource (book, framework guide, etc.), we issue a signed, per-contact, expiring download link. The link is unique to you, expires after a set period, and is bound to your contact record so we can track which resources you have received. It is not a shareable public URL.

3.8 Chatbot data (aifirstnation.org — LLX)

When you chat with the LLX chatbot on aifirstnation.org, your conversation is processed to answer your questions using the “AI-First Nation” book and related material. We keep conversation logs to improve response quality and to analyse aggregate trends. We do not link your specific chat history to your identity unless you identify yourself in the conversation.

3.9 Contact forms (all sites)

If you submit a contact or speaking-request form, we collect the name, email, and message details you provide, plus any category you select (speaking, media, book-related, general inquiry). We use this solely to respond to your inquiry.

4. How we use AI

Artificial intelligence and large language models (LLMs) power many of the features across the Ecosystem. Here is how they handle your data:

LLX chatbot (aifirstnation.org). Conversations are processed by a hosted AI/LLM provider to generate answers grounded in the book. Logs may be reviewed to improve quality. We do not use your chat content to train a public model.

AI personalisation (aiready.sg). Your role, industry, and optional professional bio are processed by a hosted AI/LLM provider to tailor lesson content and capstone assignments to your context. This data is stored against your account, encrypted at rest, never shared with other learners, and the provider does not use it for model training. You can edit or clear these fields from your profile at any time; changes apply to future content, not content already issued.

AI-scored capstones (aiready.sg). If a course includes a capstone, your submission is scored by AI against an AIRI-anchored rubric. Submissions are stored against your account and never shared with other learners (no peer review). We calibrate AI scoring against human scoring on a spot-check sample and target a correlation of at least 0.7 Pearson with human scoring on the same submissions.

Accuracy and your judgment. AI can be wrong. Treat chatbot answers, recommendations, and scores as educational input — not as professional advice. Always apply your own judgment before acting on AI-generated output.

5. How we measure success (analytics)

We use Independent Analytics Pro to understand which parts of the Ecosystem are most helpful.

Privacy-first: all analytics data is recorded and stored locally on our own servers. Nothing is sent to third parties.
No cross-site tracking: we do not follow you across other websites (except AIFN websites) or build an advertising profile.
Logged-in tracking (aiready.sg): because it is a learning platform, we track page views for logged-in users to understand which course pages are most visited, where learners drop off, and which referral sources drive registrations. This data is aggregated — we use it to improve the platform, not to profile individuals.
UTM parameters: we use UTM tags on links in our emails and social posts to measure which campaigns bring visitors. These are standard URL parameters and do not involve cookies or tracking pixels.
SEO: we use SlimSEO to monitor search performance via server-to-server data from Google Search Console. This does not require tracking cookies on your device.

6. Email communications

The Ecosystem uses FluentCRM Pro (running on a central hub) to manage marketing email, and FluentSMTP to deliver transactional email through SMTP2GO.

When you register or sign up, you may receive:

Transactional emails — welcome messages, assessment results, course-enrolment confirmations, password resets, download links. These are essential to the service and cannot be opted out of while you have an active account.
Engagement emails — nudges when you have not logged in for a while, course recommendations based on your assessment scores, milestone celebrations. You can unsubscribe from these at any time using the link in any email.
Newsletter (AIFN Insights) — periodic thought-leadership and framework updates. Opt-in only; you will not receive it unless you subscribe.

FluentCRM tracks email opens and link clicks to help us understand which content is useful and to avoid sending you email you do not engage with. This uses a small transparent pixel in the email and redirect links. If you prefer not to be tracked, most email clients offer a “block remote images” setting that prevents open tracking.

7. Cookies and local storage

We use cookies sparingly. A detailed breakdown lives in our Cookie Policy. In summary:

Type	Purpose	Duration
Essential	Security and bot protection via Rocket.net/Cloudflare; anti-spam verification via CleanTalk.	Session or as required by provider
Functional	Remembering your name/email if you have previously filled out a form.	Up to 30 days
Session	Keeping you logged in to your student dashboard, community profile, and support portal.	Until you log out or close your browser
Progress	Saving your place in a course or assessment (LifterLMS).	Until course completion or account deletion
Email	FluentCRM may set a cookie to identify you when you click a link in one of our emails, enabling features like Smart Links.	Up to 30 days

We do not use advertising cookies, social-media tracking pixels, Google Analytics, or any cookie that follows you to other websites.

8. How data flows across the Ecosystem

Because the sites are connected, some data moves between them:

Sign-up-once: a sign-up on any public site (aifirstnation.org, airi.foundation, aiready.sg, or an airihub.io tenant site) creates a single contact record in the central CRM. Your name, email, and the resources you requested are shared across the Ecosystem only to deliver what you asked for.
Downloads: framework and book downloads from airi.foundation are tracked by country of origin only — no email or account is required unless you also subscribe.
Community and learning: course progress, scores, and community activity stay on aiready.sg.
Organisational surveys: oAIRI responses collected on airihub.io tenant sites are aggregated into the owning organisation’s result and stored for that organisation.

We do not combine data across sites to build a profile for advertising, because we do not do advertising.

9. Third-party data processors

We use a limited set of third-party services to operate the Ecosystem. None of them are advertising companies, and none are given permission to use your data for their own purposes.

Service	What it does	Data shared
Rocket.net	Web hosting and CDN (via Cloudflare)	All site data is stored on Rocket.net servers
Cloudflare	CDN, security, and bot protection	IP address, request metadata (for security filtering)
SMTP2GO	Transactional and marketing email delivery	Email address, name, email content
CleanTalk	Anti-spam protection for forms and registration	IP address, email, form-submission metadata (checked against known spam databases)
Hosted AI/LLM provider(s)	Power the LLX chatbot and AI personalisation/scoring	Content you submit to those features. The provider does not use it for model training.
Third-party payment processor(s) (e.g., Amazon, Stripe)	Book and (where applicable) paid-feature checkout	Handled by the processor under its own policy; we do not store your full card details

All data is processed in accordance with each provider’s privacy policy and applicable data-protection laws.

10. Data security and storage

Your data is hosted on Rocket.net, a high-performance managed-WordPress platform with built-in Cloudflare security.

Email security: we bypass standard unencrypted web-server email and route all outgoing mail through FluentSMTP to encrypted API connections at SMTP2GO/SendGrid, with SPF/DKIM authentication to protect against interception and spoofing.
Passwords: stored as salted hashes using WordPress’s native authentication system — never in plain text.
Admin access: protected by 2FA-enabled logins, login-attempt limits, and hardening via ASE Pro (XML-RPC disabled, REST API restricted to authenticated users, author archives disabled).
Download links: lead-magnet downloads use HMAC-signed, per-contact, expiring links tied to your contact record.

11. International data transfers

Your data may be processed or stored outside Singapore (for example, by Rocket.net, Cloudflare, or an LLM provider in another region). Where this happens, we rely on appropriate safeguards — standard contractual clauses, data-processing agreements, and compliance with applicable data-protection laws including Singapore’s Personal Data Protection Act (PDPA).

12. Data retention

Data type	Retention period
Account and profile data (aiready.sg)	Retained while your account is active; deleted on account-deletion request.
Assessment scores (pAIRI/oAIRI)	Retained while your account is active; overwritten when you retake an assessment.
Course progress and completion	Retained while your account is active.
Community posts and replies	Retained while your account is active; removed on account deletion.
oAIRI organisational survey responses (airihub.io)	Retained for the life of the owning organisation’s engagement, then per that engagement’s agreement.
Analytics data (page views, UTMs)	Retained for 2 years, then purged. IP addresses are anonymised.
Chatbot (LLX) logs	Retained for up to 36 months.
CRM contact records (hub)	Retained while you are an active contact; removed on deletion or unsubscribe request.
Purchase records	Retained as required by law and for tax/accounting purposes.

13. Your rights

You have the right to:

Access your personal data — your dashboard shows your profile, scores, and progress at any time.
Correct inaccurate data — update your profile from your account settings, or contact us to correct anything else.
Delete your account and associated data — contact us and we will delete your account, profile, assessment scores, course progress, community posts, and CRM contact record. Anonymised, aggregated analytics data (which cannot identify you) is not deleted.
Export your data — contact us and we will provide a copy of your personal data in a portable format.
Unsubscribe from marketing emails at any time using the link in any email, or by contacting us.
Withdraw consent for optional processing (such as the professional bio used for AI personalisation) at any time by clearing the relevant field in your profile.

We aim to respond to all data requests within 30 days.

Legal basis for processing

We process your data on the following bases:

Consent — when you sign up, subscribe, or voluntarily provide optional data.
Contractual necessity — to provide the account, courses, assessments, and downloads you requested.
Legitimate interests — to keep the platform secure, improve content, and operate the business, where these do not override your rights.
Legal obligation — where we are required to retain data (for example, tax records).

14. Children’s privacy

The platform is designed for working professionals. We do not knowingly collect data from anyone under the age of 16. If you believe a minor has created an account, please contact us and we will remove it promptly.

15. Changes to this policy

We may update this policy from time to time. When we make significant changes, we will notify registered users by email and update the “Last updated” date at the top of this page. Your continued use of the Ecosystem after changes are posted constitutes acceptance of the updated policy.

16. Contact

For any privacy question or to exercise a data right, contact the Data Controller:

Contact form: Contact Us
Postal address: AI-First Nation, c/o Laurence Liew, 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051