Privacy notice
We collect only what we need to run our programs and assessments, give you your results and keep the service safe. We never sell your personal data and we do not use advertising trackers. You can ask for a copy of your data, a correction or deletion at any time.
Who we are
The Untaught Lessons is a learning company founded by Wen-Szu Lin. We run programs such as Think, speak and act like an executive™, the Executive Signature assessment and related practice tools. In this notice, "we" and "us" mean The Untaught Lessons. You can reach us through the contact page or by replying to any email we send you.
What we collect
What we hold depends on how you use the site.
- Program members: Your name, email address, cohort, the organization that sponsors your access if there is one, your access dates and when and how you sign in. We also keep your progress through lessons and exercises, the answers you save, your scores, points and certificates and how you use the workspace, such as the pages you open and the time you spend on a step.
- Executive Signature: Your name, email address, age range, career stage and main goal, and optionally your organization, job title and country or region. We keep your answers, your result (scores, band and profile) and a record of the privacy notice you agreed to and when. If you choose to hear from us about programs, we record that as a separate choice.
- Forms on this site: The waitlist, the contact form, Find your level and the feedback button collect the name, email address and message you type, and the page you were on. When you send the waitlist form, we also record the name of the website or the campaign link that brought you here, such as linkedin.com or a campaign tag. We do not record the full address you came from. The refund request form on the refund policy page collects your name, the email address you used to buy, the product, an optional note and a one way scrambled copy of your network address that limits misuse. We use them only to answer your request.
- AI feedback: When you ask for it, the text you write or speak for that exercise goes to Google's Gemini service, which writes the feedback. We do not send your name or email address with that text.
- Your browser: We store small pieces of information in your browser, such as your sign-in session and a copy of your progress, so the site works and your work is not lost. We also record technical error reports so we can fix problems. We do not use advertising cookies. Services we rely on, such as Vimeo for videos and Cloudflare for delivering the site, may set their own cookies.
Why we use your data
- Running the program: Signing you in, saving your work, showing your progress, issuing certificates and sending the emails you need, such as sign-in links and your results.
- Results and feedback: Calculating your assessment result and, when you ask, producing AI feedback.
- Improving our work: We look at results combined across many people to improve questions, scoring and guidance. We do not publish individual results.
- Keeping the service safe: Preventing misuse, limiting abuse and fixing technical problems.
- Contacting you: We write to you about programs only if you chose that, and you can change your mind at any time.
Who can see your data
- Our team: A small number of UTL staff can see member records to run the service and give support. Reading an individual person's saved answers is restricted, and each time it happens we record it.
- Your sponsoring organization: If your employer, school or another organization pays for your access, its authorized representatives can see your name, email address, progress and completion for the cohorts they support. They do not see your saved answers or your assessment responses.
- Service providers: Other companies run parts of the service and handle your data only for that purpose.
- Supabase: Our database and sign-in service, with data stored in Singapore.
- Google: An earlier copy of our records while we finish moving to Supabase, and the Gemini AI feedback service.
- Resend: Sends our emails.
- GitHub and Cloudflare: Deliver this website and protect it from abuse.
- Vimeo and Stripe: Vimeo plays our videos. When paid products are offered, Stripe handles payment and we never see or store your card number.
We do not sell your personal data and we do not share it for advertising. We may disclose data if the law requires it.
How we protect your data
You sign in with a one-time email link or with your Google or Microsoft account, and we never see the password for those accounts. Access is limited by role, our database controls who can read each record and connections to our services are encrypted. No system is perfectly secure. If we learn of a breach that affects you, we will tell you.
How long we keep it
We keep your personal data for as long as you have an account or as long as we need it for the purposes above. If you ask us to delete it, we will, unless the law requires us to keep it. Backup copies may remain for a short time after deletion.
Your choices
You can ask us to do any of the following.
- Seeing your data: Ask for a copy of what we hold about you.
- Correcting it: Ask us to fix anything that is wrong. You can also change your name and avatar in your account.
- Deleting it: Ask us to delete your personal data.
- Stopping program emails: Use the link in any such email or tell us.
- Asking or complaining: Send us a question or complaint and we will reply as quickly as we can.
To make a request, use the contact page or reply to an email from us. We may ask you to confirm who you are first.
Young people
Our programs are written for adults and young professionals. If you are under 18, please check with a parent, guardian or teacher before you share personal details with us.
Changes to this notice
When we change this notice, we will update the date and version at the top of this page. If a change is important, we will also tell members by email.