Privacy Policy

• •Account and session data: email address, login link tokens, session identifiers, device and browser information.
• •Test data: your answers, response times, scores and generated report content.
• •Payment-related data: subscription status, billing period dates and payment confirmations. Card details are handled by our payment provider and never stored by us.
• •Analytics data: aggregated usage events such as test starts, completions and page views.
• •Support data: messages you send us.

• •To run the assessment and generate your report.
• •To give you access to purchased content across sessions and devices.
• •To take payment, manage renewals and handle cancellations and refunds.
• •To keep the service secure and prevent abuse.
• •To improve the product using aggregated analytics.

[Legal bases placeholder — for EU/UK GDPR typically: performance of a contract for delivering the assessment and subscription; legitimate interests for security and product improvement; consent for non-essential analytics and marketing; legal obligation for tax and accounting records.]

Test results and account records are kept while your account exists and for [12 months] afterwards, unless a longer period is required for tax or accounting purposes. You can request deletion at any time.

• •Payment processing: [Stripe / your payment provider].
• •Application hosting, database and authentication: [Supabase / your hosting provider].
• •Analytics: [your analytics provider].
• •Email delivery: [your email provider].

[Add links to each processor's own privacy policy before launch.]

• •Access a copy of your data.
• •Correct inaccurate data.
• •Delete your data, subject to legal retention requirements.
• •Object to or restrict certain processing.
• •Withdraw consent for analytics at any time.
• •Receive your data in a portable format.
• •Complain to your local data protection authority.

Data controller: [Company Legal Name], [Registered Address, City, Country]. Privacy requests: [support@yourdomain.com].