Back to home Impressum
Terms

Terms & Privacy

Using the FY website and enrolling in the course means accepting the terms below. This is a convenience translation; the German version is the binding one. Last updated: 7 October 2026.

This English text is provided for convenience. In case of any difference, the German version prevails.

1. What this website collects

  • The pages of this website are static and there are no user accounts. Nothing is sent to us while you browse the pages; the exceptions are listed one by one in section 3.
  • Contact, package, course and consultation forms: when you submit, what you wrote is stored on FY’s own relay server at Cloudflare and used only to get back to you; it is kept for at most six months and deleted on request. If the relay server cannot be reached, the form works the old way and opens your own e-mail app. The application form always opens your e-mail app; you attach your CV yourself. For the free consultation call, the day and time you pick are part of this entry too; you get a calendar file (.ics) for your own calendar.
  • Course enrolment happens through the form on the website or by e-mail. We use your name and e-mail address to issue the licence.
  • The student portal page is not yet connected to a working portal and does not ask for a password. The e-mail address you enter in its «notify me» form is stored as a notification list on the same relay server; it stays for at most six months, is deleted automatically if the portal has not opened by then, and on request at any time.

2. Cookies and browser storage

  • The website sets no cookies. There is no advertising and no third-party tracker.
  • The FYOS chat keeps its daily question counter in two places: in your browser's storage (only the current day's counter is kept, older ones are removed; it disappears when you clear your browser data) and, to prevent abuse, on the relay server, tied to your IP address, in Cloudflare KV. The server-side entry is deleted automatically at the end of the day (UTC).
  • The question you ask FYOS in the website chat is sent to FY's own relay server at Cloudflare in order to generate the answer; up to six previous messages from the same conversation are sent with it as context. The relay server passes this text to the AI provider (Anthropic, PBC or Cloudflare Workers AI) and returns the answer to you. Your questions are not tied to an account, are not stored by us and are not used for advertising; the conversation history exists only in the open page and is gone when you reload or close it. If the relay server cannot be reached, FYOS falls back to the offline demo with prepared answers and no request leaves your browser. For the Telegram bot, the “FYOS on Telegram” paragraph below applies.
  • Live voice mode is off by default; the first time, it turns on only if you press the microphone button and agree. While on, the microphone waits for the word «Melis». If your browser can recognise speech inside your device, your voice never leaves it; if it cannot, everything you say (even while the microphone is waiting for «Melis») goes to your browser maker’s speech service purely to be turned into text — the consent box states which of the two applies. No recording reaches us and we store none; your question, once turned into text, goes to FY’s relay server just like a typed question. The fact that voice mode is on is kept only in your browser storage: if you leave the page with voice mode on, it starts again by itself on your next visit, provided the microphone permission is still granted; switching the microphone off removes this entry; your consent is kept there too, so that you are not asked again next time, and disappears when you clear your browser data.

3. External services and hosting

  • Every file of the website, including the font, is loaded from this website. Beyond that, your browser only sends requests to FY's relay server (Cloudflare Workers): when you ask FYOS a question, when FYOS reads an answer aloud, when you submit a form, look at free appointment times or download your booking’s calendar file (.ics); and on the home page, once a minute while it is open and visible, to fetch the number of upcoming appointments for the “Boardroom” card (the answer is just a number). No request goes to any other external address; for the voice that may go to your browser maker’s speech service in live voice mode, see section 2.
  • The website is hosted on Cloudflare Pages. Cloudflare processes connection data such as your IP address in order to deliver the pages to you and to protect the website against attacks; this data is not passed on to us. Cloudflare’s visitor statistics (Web Analytics) are switched off for this website; Cloudflare adds no scripts or cookies to the pages. Details under “Hosting and relay server” in section 7.
  • Your connection to the website is encrypted (HTTPS).

4. What we do with your details

  • Details you send us through a form or by e-mail are used only to provide the service you asked for.
  • Your details are never sold or passed on to any third party.
  • You can ask for the deletion of the details you sent us at any time by e-mail.

5. Conditions of the «AI Journey» course

The course is currently offered free of charge: no payment is taken for enrolment. The payment and fee clauses below apply from the moment the course becomes paid again, and only to enrolments made after that date.

  • The course licence is personal; it is issued to the buyer's name and e-mail address and embedded as a watermark in the videos.
  • Sharing, reselling, publishing or distributing the course content (video, files, text) is prohibited and will be pursued legally; the infringer's licence is cancelled without refund.
  • The course is paid in one payment; instalments are not available.
  • Course support is included for 45 days after enrolment; after that, an extension costs 10% of the course price.

6. Right of withdrawal

This section applies to consumers (§ 13 BGB — people who buy the «AI Journey» course for purposes outside their trade, business or profession). The contract is concluded by e-mail and is therefore a distance contract (§ 312c BGB); the course is digital content not supplied on a tangible medium. If you buy as a business, there is no statutory right of withdrawal. Web design and automation are offered to businesses; if a consumer orders such a service, the withdrawal notice for service contracts is provided separately with the offer. The free 30-minute call does not create a contract.

Withdrawal notice

Right of withdrawal. You have the right to withdraw from this contract within fourteen days without giving any reason. The withdrawal period is fourteen days from the day the contract is concluded. To exercise the right of withdrawal, you must inform us (Farhad Yaqoobi — FY, Siebengebirgsring 36 a, 53340 Meckenheim, Germany; e-mail: JavaScript required to show the e-mail address) of your decision to withdraw from this contract by an unequivocal statement (e.g. a letter sent by post or an e-mail). You may use the model withdrawal form below, but it is not obligatory. To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.

Effects of withdrawal. If you withdraw from this contract, we shall reimburse to you all payments received from you, including the costs of delivery (with the exception of the supplementary costs resulting from your choice of a type of delivery other than the least expensive type of standard delivery offered by us), without undue delay and in any event not later than fourteen days from the day on which we are informed about your decision to withdraw from this contract. We will carry out such reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of such reimbursement.

When is the contract concluded and when does the period start?

Enrolment is not made through a «buy» button on the website but by e-mail exchange. The contract is concluded on the day we send you, in reply to your enrolment e-mail, the acceptance of your enrolment with the payment steps; the fourteen-day withdrawal period runs from that day. You also receive this notice and the model form with that e-mail before the contract is concluded, so you have a durable copy.

Early expiry of the right of withdrawal (§ 356 BGB — digital content)

For digital content not supplied on a tangible medium, the right of withdrawal expires before the end of the period once all three conditions are met:

  • you have expressly consented to us beginning performance of the contract before the withdrawal period ends,
  • you have acknowledged that you thereby lose your right of withdrawal,
  • and, before sending the access details, we have provided you with a confirmation of the contract on a durable medium — e-mail is sufficient — that includes your consent and this acknowledgement (§ 312f BGB).

Without your consent, course access is opened only after the fourteen-day withdrawal period has ended; your right of withdrawal remains fully intact during that time. The expiry or lapse of the right of withdrawal does not affect the 45 days of support or lifetime access; in case of withdrawal the contract falls away entirely. Your statutory rights regarding defects in digital content (§§ 327 ff. BGB) apply in any case.

Consent text (in the enrolment e-mail)

If you want immediate access, you confirm it in the enrolment e-mail by writing the following two sentences yourself — a pre-ticked box, a default consent or a mere «ok/yes» does not count:

«I want to access the course content immediately. I expressly consent to performance of the contract for the “AI Journey” course beginning before the withdrawal period has ended.»
«I acknowledge that I lose my right of withdrawal by giving this consent.»

Model withdrawal form

(If you want to withdraw from the contract, please fill out this form and send it back.)

  • To Farhad Yaqoobi — FY, Siebengebirgsring 36 a, 53340 Meckenheim, Germany — e-mail
  • I/We (*) hereby give notice that I/We (*) withdraw from my/our (*) contract for the provision of the following service: online course «AI Journey»
  • Ordered on (*)/received on (*): ______
  • Name of consumer(s): ______
  • Address of consumer(s): ______
  • Signature of consumer(s) (only if this form is notified on paper): ______ — Date: ______
  • (*) Delete as appropriate.

7. Controller and your rights (Art. 13 GDPR)

Controller

Farhad Yaqoobi · FY — AI Agency
Siebengebirgsring 36 a, 53340 Meckenheim, Germany
E-mail: JavaScript required to show the e-mail address

There is no obligation to appoint a data protection officer. The full provider details are in the Impressum (legal notice).

Purposes and legal bases

  • Hosting and relay server (Cloudflare). The website is hosted on Cloudflare Pages; FY’s relay server (Cloudflare Workers, Cloudflare KV and Cloudflare Workers AI) runs at Cloudflare too. Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page or your browser sends a request to the relay server, Cloudflare processes connection data such as your IP address, the time, the requested address and browser information in order to deliver the page or the answer to you and to protect the website against attacks. Cloudflare does this on our behalf under its data processing agreement (Art. 28 GDPR); to the extent Cloudflare uses data for its own purposes (e.g. network security), its own privacy policy applies. This page-request data is not passed on to us. Legal basis: Art. 6(1)(f) GDPR — secure and stable operation of the website and the relay server. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; transfers to the USA rely on the European Commission’s adequacy decision for that framework (Art. 45 GDPR). If the certification lapses, the standard contractual clauses in Cloudflare’s data processing agreement apply (Art. 46 GDPR). This item applies wherever Cloudflare is mentioned on this page.
  • Contact, package, course and consultation forms, and your e-mails. To answer your request and prepare an offer. Form entries are stored on FY’s relay server (Cloudflare KV) for at most six months; your IP address is not written into the entry, it only sits in a counter until the end of the day to prevent abuse. To notify FY of a new entry, the e-mail service Resend, Inc. (USA) may be used; when it is, only the form fields are transmitted. Legal basis: Art. 6(1)(b) GDPR — pre-contractual steps; also Art. 6(1)(f) GDPR — our legitimate interest in answering enquiries. Transfers to Resend are safeguarded by standard contractual clauses under Art. 46 GDPR. If you book a call, the day and time are added to the entry; bookings are fed into FY’s calendar from the same relay server.
  • Course enrolment, licence and invoice. Name, e-mail and payment details to issue the licence, open access, provide support and issue the invoice. Legal basis: Art. 6(1)(b) GDPR — performance of the contract; for invoice data Art. 6(1)(c) GDPR — statutory retention duty.
  • Job application (CV). To evaluate your application. Legal basis: Art. 6(1)(b) GDPR and § 26 BDSG (German Federal Data Protection Act).
  • Student portal notification list. Only your e-mail address, to notify you when the portal opens; it is stored on the same relay server for at most six months. Legal basis: Art. 6(1)(a) GDPR — your consent; you can withdraw it at any time by e-mail without affecting the lawfulness of processing before withdrawal.
  • Browser storage. The daily counter and the voice-mode entries in browser storage are strictly necessary for a function you expressly requested and need no consent (§ 25(2) no. 2 TDDDG).
  • Live voice mode (speech recognition). Runs only when you explicitly switch the microphone on. If the browser can recognise speech inside the device, your voice does not leave it and no processing arises on our side. If it cannot, your recording goes to the browser maker’s speech service to be turned into text (e.g. Google LLC, USA — Chrome; Microsoft Corporation, USA — Edge); that processing and the transfer to the USA are subject to that maker’s own privacy policy and we have no access to the data. Legal basis: Art. 6(1)(a) GDPR — your explicit consent; you can withdraw it at any time by switching the microphone off, and withdrawal does not affect the lawfulness of processing carried out until then.

FYOS chat and spoken answers

The chat is switched on, and the following applies: to count your daily question quota and to protect the service from abuse, your IP address is stored on FY's relay server (Cloudflare KV) until the end of the day (UTC) and deleted automatically afterwards; your question and at most six previous messages from the same conversation are sent to Anthropic, PBC (USA) or Cloudflare Workers AI to generate the answer. Legal basis: Art. 6(1)(f) GDPR — the legitimate interest in offering visitors a working assistant and protecting the service from abuse; transfers to Anthropic are safeguarded by standard contractual clauses under Art. 46 GDPR (for Cloudflare, see “Hosting and relay server” above). In voice mode the answers are read aloud. If a speech key is configured, the answer text FYOS produced and your IP address are sent to the speech provider (OpenAI, L.L.C. or ElevenLabs Inc., both USA) so that it can generate the audio; to count your daily speech quota, your IP address is also kept on the relay server (Cloudflare KV) until the end of the day (UTC). Your own recording never goes there — only FYOS’s own answer. The same legal basis applies, and this transfer is likewise safeguarded by standard contractual clauses under Art. 46 GDPR. If no key is configured or the daily quota is used up, your browser’s own voice reads the answer and FY does not send the text to any speech provider; some browser voices (e.g. the “Google …” voices in Chrome) work online and pass the text to the browser maker.

FYOS on Telegram. You can also write to FYOS through its Telegram bot. Telegram itself, Telegram Messenger Inc. (outside the EU; EU representative under Art. 27 GDPR: European Data Protection Office, Brussels), acts under its own privacy policy. Your message to the bot reaches FY's relay server through Telegram's servers; your IP address does not reach us, and your name, username and profile picture are neither used nor stored. The answer is generated the same way as in the website chat, by Anthropic, PBC (USA) or Cloudflare Workers AI. To pick the language of the answer, the interface language Telegram reports for your app (e.g. “de”) is sent along with the question. To count your daily question quota, your Telegram chat ID is stored on the relay server (Cloudflare KV) until the end of the day (UTC); for conversational context the last six messages are stored for at most one hour and then deleted automatically — send the bot /delete and the context is deleted at once; /privacy sends you a link to this page. If a speech key is configured, the answer is also sent to the speech provider (OpenAI, L.L.C. or ElevenLabs Inc., both USA) so that it can be delivered as a voice message. If you have blocked voice messages in Telegram, this is noted in the counter until the end of the day and no voice message is sent to you. The same legal basis and transfer safeguards as above apply.

Retention

  • Contact and offer records (form and e-mail): until the request is settled; if no contract is concluded, deleted after six months at the latest. Form entries on the relay server are deleted automatically after six months.
  • Course contract, licence and invoice records: ten years under tax law (§ 147 AO, § 257 HGB).
  • Job applications: deleted no later than six months after the process ends; longer storage only with your consent.
  • Notification list: at most six months; deleted at once if you withdraw your consent earlier.
  • Telegram bot: daily counter until the end of the day (UTC); conversational context (last six messages) at most one hour — immediately with /delete.

Your rights

  • Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).
  • Objection (Art. 21): you may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests (Art. 6(1)(f)).
  • Withdrawal of consent (Art. 7(3)): for processing based on consent, with effect for the future.
  • Complaint (Art. 77): the supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit NRW, Kavalleriestraße 2-4, 40213 Düsseldorf, www.ldi.nrw.de). You may also contact the supervisory authority where you live.

To exercise these rights, an e-mail is enough. Providing personal data is neither a legal nor a contractual obligation; without it, however, we cannot handle your request or sell you the course. No automated decision-making or profiling takes place.

A question about these terms? Send an e-mail.