This Privacy Policy describes how aicert.study collects, uses, and protects your personal data. We comply with the Brazilian LGPD (Law 13.709/2018) and, where applicable, the GDPR.
1. Data we collect
We collect: (i) signup data — email and name (optional); (ii) usage data — practice exams taken, answers, scores, time spent reading lessons; (iii) technical data — IP address, device and browser type, essential cookies. We do not collect sensitive data (race, religion, health, political views).
2. How we use your data
We use your data to: (a) provide the service (authenticate, save progress, generate metrics); (b) personalize study recommendations; (c) send essential transactional communications (payment confirmation, session expiration); (d) comply with legal and fiscal obligations. We do not sell your data to third parties.
3. Data processors
We share strictly necessary data with: Supabase Inc. (database hosting and authentication), Stripe Inc. (payment processing), Vercel Inc. (application hosting), and Sentry (error monitoring). All follow international security and privacy standards.
4. Cookies and similar technologies
We use essential cookies for authentication and anonymous analytics cookies (Vercel Analytics) to measure aggregate usage. We do not use behavioral advertising or third-party tracking cookies.
5. Your rights (LGPD/GDPR)
You have the right to: (i) access your data; (ii) correct incorrect data; (iii) request deletion of your account and associated data; (iv) port your data in a structured format; (v) revoke consents at any time. To exercise any right, email privacy@accaf.prep.
6. Retention and security
We keep your data while your account is active. After deletion, data is removed within 30 days, except for fiscal records we must keep for 5 years (Brazilian law). We adopt encryption in transit (TLS) and at rest, RLS in the database, and access auditing.
7. DPO contact
For privacy questions or to exercise your rights, contact our Data Protection Officer at privacy@accaf.prep. We respond within 15 calendar days.