Privacy Policy

11. Introduction

Welcome to AutoviaTest. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you use our service, and tell you about your privacy rights and how the law protects you.

22. Data Controller

The data controller responsible for your personal data is:

• Name: Pawan Priyadarshi
• Location: Barcelona, Spain
• Email: contact@autoviatest.com

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es (opens in a new tab)).

33. Legal Basis for Processing

We process your personal data under the following legal bases (GDPR Article 6):

• Contract performance: To provide the Service, manage your account, and track your learning progress
• Legitimate interest: To improve our Service, fix bugs, and ensure security
• Consent: For optional product analytics and session recordings (you can turn these off at any time in your account preferences)
• Legal obligation: To comply with applicable laws and regulations

44. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you:

• Identity Data: Display name, username (optional)
• Contact Data: Email address
• Technical Data: IP address, browser type, device information
• Usage Data: Test scores, progress, time spent, questions answered

55. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use your data to:

• Provide and manage your account
• Track your test progress and performance
• Send you administrative information and updates
• Improve our website and services
• Comply with legal obligations

66. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We use industry-standard encryption (TLS) for data transmission and secure authentication via Supabase. Access to your personal data is limited to those who need it for legitimate business purposes.

77. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for. Account data and test results are retained while your account is active. If you delete your account, all personal data will be permanently deleted within 30 days.

Analytics data is retained for 1 year, then automatically deleted.

88. Your Legal Rights (GDPR)

Under data protection laws, you have rights including:

• Right to access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation on how we use your data
• Right to data portability: Request transfer of your data to another service
• Right to object: Object to processing of your data
• Right to withdraw consent: Withdraw consent at any time

To exercise any of these rights, please visit your account settings or contact us at contact@autoviatest.com. We will respond within 30 days.

99. Third-Party Services

We do not sell your personal data. We use the following third-party services:

• Supabase: Database and authentication services (GDPR compliant)
• Vercel: Web hosting and deployment (GDPR compliant)
• Stripe: Payment processing for subscriptions. Stripe processes your payment information directly and is PCI DSS compliant. We do not store your card details. See Stripe Privacy Policy (opens in a new tab).
• PostHog: Product analytics, used to understand how the app is used so we can improve it.

What PostHog collects

• Event data: Actions you take in the app, such as finishing a mock test or opening a lesson
• Session recordings: Recordings of how you navigate the app, used to find usability problems
• Device information: Browser type, screen size, and operating system

Privacy protections

• All form inputs are automatically masked in session recordings
• Your email address is not sent to PostHog
• We respect the Do Not Track (DNT) browser setting
• Analytics data is retained for 1 year

Turning analytics off

You can turn analytics and session recordings off at any time in your account preferences. When you do, no further events are recorded and nothing else about the app changes.

All our third-party service providers are required to take appropriate security measures to protect your personal data in line with GDPR requirements. We may also share data when required by law or to protect our rights.

1010. International Transfers

Your data may be transferred to and stored in countries outside the European Economic Area (EEA) — our product analytics, for example, are hosted in the United States. Where this occurs, we ensure that appropriate safeguards are in place, including EU-approved Standard Contractual Clauses (SCCs) with our service providers.

1111. Cookies

We use essential cookies and local storage to keep you signed in and remember your preferences, and product analytics stores an identifier in your browser unless you turn analytics off. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy (opens in a new tab).

1212. Children’s Privacy

Our service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

1313. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new privacy policy on this page and updating the “last updated” date.

1414. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at contact@autoviatest.com.