Privacy Policy

1. Who we are

ScoreReady ("we", "us", or "our") operates the website scoreready.io, an exam preparation platform for the Criteria Cognitive Aptitude Test (CCAT). This policy explains how we collect, use, and protect your personal information.

2. Information we collect

We collect information you provide directly and information generated by your use of our service:

• Account information — your name and email address, provided via Google OAuth when you sign in.
• Exam data — your answers, scores, time taken, and exam history.
• Billing information — payment is processed by Stripe. We store only your Stripe customer ID; we never see or store your card details.
• Usage data — pages visited and actions taken, collected to improve the service.

3. How we use your information

• To provide and operate the ScoreReady service.
• To process payments and manage your subscription via Stripe.
• To display your exam history, scores, and progress on your dashboard.
• To send transactional emails (e.g., subscription receipts) — we do not send marketing emails without your consent.
• To improve the platform based on usage patterns.

4. Data sharing

We do not sell your personal data. We share data only with:

• Supabase — our database and authentication provider.
• Stripe — our payment processor. Stripe's use of your data is governed by Stripe's Privacy Policy.
• Google — solely for the OAuth sign-in flow.

5. Data retention

We retain your account and exam data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or billing purposes.

6. Cookies

We use session cookies to keep you signed in. We do not use tracking or advertising cookies.

7. Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at the address below. You may also cancel your subscription at any time from your billing portal.

8. Security

We use industry-standard security practices including encrypted connections (HTTPS), row-level security on our database, and scoped API keys. No method of transmission over the internet is 100% secure, but we take reasonable precautions to protect your data.

9. Changes to this policy

We may update this policy from time to time. We will post the updated policy on this page with a new "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy, please contact us at support@scoreready.io.