Privacy policy

1. Information we collect

• Account information, including email address and display name.
• Practice activity, answers, scores, timing and progress history.
• Billing references, plan status and purchase timestamps. Stripe, not AceJobTest, handles full card details.
• Technical and security information such as IP address, device details, request logs and authentication events.
• Messages you send when asking for help or exercising your rights.

2. Why we use it

We use this information to create and secure accounts, deliver practice content, save progress, provide paid access, process and reconcile purchases, prevent abuse, answer support requests and comply with legal and accounting obligations. Depending on the activity, our lawful basis is performing our contract with you, complying with law or our legitimate interests in operating and protecting the service.

3. Service providers

We use Supabase for authentication and database hosting, Vercel for site hosting and delivery, and Stripe for payments, billing and fraud prevention. Each provider processes information under its own security controls and contractual responsibilities. We may also disclose data where required by law or to protect legal rights and service security. We do not sell personal information.

4. Retention

We keep account and practice history while your account is active so your progress remains available. Billing and transaction records may be kept longer where required for tax, accounting, disputes and fraud prevention. Security logs are retained only as long as reasonably needed for those purposes. When information is no longer needed, it is deleted or anonymised.

5. Cookies and local storage

AceJobTest uses essential authentication and security storage so you can sign in and move safely between pages. These are necessary to provide the service. If optional analytics or advertising tools are introduced, this policy and the site's consent controls will be updated first.

6. International processing

Our providers may process data outside the UK. Where required, transfers are protected using recognised safeguards such as adequacy regulations or approved contractual clauses.

7. Your rights

Depending on the circumstances, you may ask to access, correct, erase or restrict your information, object to certain processing, or receive a portable copy. You may also complain to the UK Information Commissioner's Office. We may need to verify your identity before completing a request.

8. Security

We use access controls, Row Level Security, encrypted connections and server-only credentials to limit access. No online service can promise absolute security, but suspected incidents are investigated and affected people or regulators are notified where required.