Privacy notice

Last updated 2 November 2026

Who controls your data

d.MBA d.o.o., a company registered in Slovenia, is the data controller for personal data collected through d.AI. Contact: support@d.mba.

What we collect

• Account data: your email address and name, given when you join.
• Payment data: handled entirely by Stripe (or, for legacy AI Makers Club memberships, Paddle). We receive transaction metadata such as amount, date and country, but never see your full card details.
• Community activity: posts, comments, submissions and profile data inside our private Circle community.
• Program records: the credits you earn and the certificate we issue to you.

Why we process it

• To give you access to the membership, the briefs and the community (contractual necessity).
• To track your credits and issue your certificate (contractual necessity).
• To email you about your membership and the briefs (contractual necessity and legitimate interest).
• To comply with our tax and accounting obligations (legal obligation).

Who we share it with

We use the following processors. Each handles your data only for the purpose stated and on our instructions:

• Stripe: payment processing, billing and tax compliance (merchant of record).
• Paddle: payment processing, billing and tax compliance for legacy AI Makers Club memberships.
• Circle: hosting the private community.
• Kit: sending the monthly brief and member emails.
• Resend: sending transactional emails such as your welcome email.
• Netlify: hosting this website and the checkout functions.
• Google Workspace: internal email, files and operations, including the member records we keep in a spreadsheet.
• Plausible: privacy friendly, cookieless web analytics on daicampus.com, hosted in the EU. See "Analytics" below.

Guest practitioners see what you post in the community during their month. They do not receive your account or payment data.

Cookies and tracking

This website does not set tracking cookies. Stripe and Circle may set functional cookies inside their own checkout and community surfaces, governed by their own notices.

Analytics

We use Plausible Analytics to understand which pages are visited and how people find us. It is cookieless, hosted in the EU, and does not track individual visitors across sites or days. Plausible records the URL visited, the referring URL, the country (derived from the IP address, which is not stored) and aggregated browser and device type. No personal data is collected and nothing is stored in your browser, which is why this site shows no cookie banner. See Plausible's data policy for details.

Your rights (GDPR)

If you live in the EU or UK you have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Email support@d.mba and we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Retention

We keep your account data while you are a member and for up to 24 months after cancellation, then delete it. Your credit record and certificate are kept so that the certificate can be verified, unless you ask us to delete them. Invoices and payment records are kept longer where tax law requires it.

Changes

Material changes will be announced in the community before they take effect.