Who holds your data, who can see it, whether AI trains on it, and what stays yours. Straight answers, legal detail linked at the bottom. Last updated 23 July 2026.
You tell me things you don't post publicly: your numbers, your plans, the way your business really runs. This page answers the questions you should be asking anyone who holds that. Short questions, straight answers, and the legal detail linked at the bottom for whenever you want it.
Jodie Hayward Ltd (company number 13644297), the company behind everything with my name on it: this website, the learn member platform, ALIGN.AI and The Engine. When you work with me, your data sits with one small company you can name, and reaching the person responsible for it takes one email... jodie@jodiehayward.com.
Everything that moves between you and my platforms travels encrypted, the same protection your online banking uses. And where two of my systems talk to each other... your member area and the Engine's intake... every single message between them is signed and verified on both sides, so nothing can read it or tamper with it in between.
No. The AI providers behind my products (Anthropic and OpenAI) receive data through their business APIs, and data sent that way isn't used to train their models. I checked their current terms before writing this sentence, and I'll keep checking. What you tell my products stays in the service that's serving you.
A small, named list, each with one job: Anthropic and OpenAI power the AI, Railway hosts the platforms and databases, Clerk handles sign-in, Stripe handles payments (so card details never touch us), ActiveCampaign sends the emails you've asked for, and Notion receives product feedback. Every privacy policy names them in full... no vague "trusted partners".
And me. Where a human reads your material, it's for one of two reasons: delivering what you've bought (every Engine Foundation is reviewed and approved by me before it reaches you) or keeping a product safe. Never curiosity, never marketing.
Yes, and this one matters to me. Your Foundation, your documents, your data... yours. Export is a button, not a request, and what we build together is designed to live on your own accounts. Nothing of yours sits on rented land.
Only ever with your permission, and only as far as it goes. You set what may be shared about you and your business... and that answer is the whole of it. No case study, no screenshot, no "a client of mine..." beyond what you've said yes to. Change your mind any time.
You take your things and go, and it's a clean exit: export what's yours, then deletion removes your account and your data from the live service. The one honest exception is the safety and audit logs the law expects us to keep... held up to 12 months, de-identified where possible, then gone too.
You hear it from me. If a breach ever affects your data, telling you and the regulator is a legal duty, and it's also just what you'd expect from someone you trust with your business. And if you're ever unhappy with how your data's been handled, the ICO (ico.org.uk) is always open to you... though I'd ask for the chance to put it right first.
All of it, in plain language: the Privacy & Cookie Policy (this site and learn), the Website Terms of Use, ALIGN.AI's own privacy policy, terms of service and cookie policy, and The Engine's set inside the product. Business clients who need a signed Data Processing Agreement can have one... it's ready, just ask: jodie@jodiehayward.com.