Privacy Policy

1. Introduction

Welcome to AutoviaTest. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

2. Data Controller

The data controller responsible for your personal data is:

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

3. Legal Basis for Processing

We process your personal data under the following legal bases (GDPR Article 6):

• Contract performance:

  To provide the Service, manage your account, and track your learning progress

• Legitimate interest:

  To improve our Service, fix bugs, and ensure security

• Consent:

  For optional analytics cookies (you can manage these via the cookie banner)

• Legal obligation:

  To comply with applicable laws and regulations

4. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you:

Identity Data:

Display name, username (optional)

Contact Data:

Email address

Technical Data:

IP address, browser type, device information

Usage Data:

Test scores, progress, time spent, questions answered

5. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use your data to:

• Provide and manage your account
• Track your test progress and performance
• Send you administrative information and updates
• Improve our website and services
• Comply with legal obligations

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We use industry-standard encryption (TLS) for data transmission and secure authentication via Supabase. Access to your personal data is limited to those who need it for legitimate business purposes.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for. Account data and test results are retained while your account is active. If you delete your account, all personal data will be permanently deleted within 30 days.

8. Your Legal Rights (GDPR)

Under data protection laws, you have rights including:

• Right to access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation on how we use your data
• Right to data portability: Request transfer of your data to another service
• Right to object: Object to processing of your data
• Right to withdraw consent: Withdraw consent at any time

9. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication services (GDPR compliant)

• Vercel: Web hosting and deployment (GDPR compliant)

• Stripe: Payment processing for subscriptions. Stripe processes your payment information directly and is PCI DSS compliant. We do not store your card details.

• Google Analytics: Web analytics service to understand how visitors use our site. Uses cookies with your consent. You can opt out via the cookie banner or Google's opt-out browser add-on.

• Google AdSense: Advertising service that may display personalized or non-personalized ads on certain pages. AdSense may use cookies to serve ads based on your browsing history. You can manage ad personalization at Google Ads Settings.

• PostHog: Product analytics (EU-hosted, privacy-focused, no cookies, memory-only persistence).

All our third-party service providers are required to take appropriate security measures to protect your personal data in line with GDPR requirements.

10. International Transfers

Your data may be transferred to and stored in countries outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, including EU-approved Standard Contractual Clauses (SCCs) with our service providers.

11. Cookies

We use cookies to improve your experience on our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

12. Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new privacy policy on this page and updating the "last updated" date.

14. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us: