Privacy Policy
Effective Date: January 17, 2026
1. Introduction
Acedify ("Company," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you access our website at https://www.acedify.com (the "Site") and use our exam preparation services, including assessments, practice tests, analytics, and related features (collectively, the "Services").
By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.
This Privacy Policy applies to all users of our Services, including visitors, registered users, and subscribers, regardless of how they access or use the Services.
2. Information We Collect
We collect information in various ways depending on how you interact with our Services. The categories of information we collect include:
2.1 Information You Provide Directly
- Account Information: When you create an account, we collect your name, email address, password, and optional profile details.
- Payment Information: When you subscribe to paid services, we collect billing details, payment card information, and transaction history. Payment processing is handled by secure third-party payment processors.
- Assessment Data: Your responses to practice questions, assessment results, study preferences, and performance analytics.
- Communications: Information you provide when contacting our support team, submitting feedback, or participating in surveys.
2.2 Information Collected Automatically
- Device Information: IP address, browser type and version, operating system, device identifiers, and hardware settings.
- Usage Data: Pages visited, features used, session duration, click patterns, and navigation paths within our Services.
- Location Data: General geographic location derived from your IP address (country, region, city).
- Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar technologies as described in Section 10.
2.3 Information from Third Parties
- Authentication Providers: If you sign in using third-party services (e.g., Google, GitHub), we receive your name, email, and profile picture from those services.
- Analytics Partners: Aggregated insights from analytics services that help us understand user behavior and improve our Services.
3. Legal Basis for Processing
We process your personal data only when we have a valid legal basis to do so. The legal grounds for processing include:
- Contractual Necessity: Processing required to provide the Services you have requested, including account creation, service delivery, and customer support.
- Consent: Processing based on your explicit consent, such as receiving marketing communications or enabling optional features. You may withdraw consent at any time.
- Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, security, service improvement, and analytics, provided these interests do not override your fundamental rights.
- Legal Obligation: Processing required to comply with applicable laws, regulations, or legal proceedings.
4. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To provide, operate, and maintain our exam preparation platform, including personalized assessments and analytics.
- Account Management: To create and manage your account, authenticate your identity, and process subscription payments.
- Personalization: To tailor your learning experience based on your performance, preferences, and study patterns.
- Communication: To send transactional emails, service updates, security alerts, and, with your consent, promotional content.
- Analytics and Improvement: To analyze usage patterns, measure Service effectiveness, and develop new features and enhancements.
- Security: To detect, prevent, and respond to fraud, abuse, or security incidents, and to protect the rights and safety of our users.
- Legal Compliance: To comply with applicable laws, respond to legal requests, and enforce our Terms and Conditions.
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your data with the following categories of recipients:
- Service Providers: Third-party vendors who perform services on our behalf, including cloud hosting (e.g., Vercel, AWS), payment processing (e.g., Stripe), email delivery, and analytics.
- Analytics Partners: Services such as Google Analytics and similar tools that help us understand how users interact with our platform.
- Legal and Regulatory Authorities: When required by law, court order, subpoena, or government request, or to protect our legal rights.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.
- With Your Consent: We may share your information with other parties when you have provided explicit consent.
All service providers are contractually obligated to protect your data and use it only for the purposes for which it was disclosed.
6. International Data Transfers
Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States and other jurisdictions where our service providers operate.
When we transfer personal data internationally, we implement appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include:
- Standard Contractual Clauses approved by the European Commission
- Data processing agreements with our service providers
- Transfers to countries recognized as providing adequate data protection
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations. Our retention periods are determined based on:
- Active Accounts: We retain your data for the duration of your account activity and for a reasonable period thereafter.
- Inactive Accounts: Accounts inactive for more than 24 months may be subject to deletion after providing notice.
- Transaction Records: Payment and billing records are retained for 7 years to comply with tax and accounting requirements.
- Legal Requirements: Data may be retained longer if required by law or to resolve disputes and enforce agreements.
Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
8. Your Privacy Rights
Depending on your jurisdiction, you may have certain rights regarding your personal information:
8.1 Rights Under GDPR (EEA/UK Residents)
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data under certain circumstances.
- Right to Restrict Processing: Request limitation of processing in specific situations.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
8.2 Rights Under CCPA (California Residents)
- Right to Know: Request disclosure of the categories and specific pieces of personal information collected about you.
- Right to Delete: Request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out: Opt out of the sale of personal information (note: we do not sell personal information).
- Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.
To exercise any of these rights, please contact us at support@acedify.com. We will respond to your request within 30 days (or as required by applicable law).
9. Children's Privacy
Our Services are not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under these age thresholds.
If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at support@acedify.com. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information promptly.
Users between the ages of 13 and 18 (or the age of majority in their jurisdiction) must have parental or guardian consent and supervision when using our Services.
10. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver relevant content. The types of cookies we use include:
- Essential Cookies: Required for the operation of our Services, including authentication and security features. These cannot be disabled.
- Functional Cookies: Enable personalized features such as language preferences and saved settings.
- Analytics Cookies: Help us understand how visitors interact with our Services by collecting anonymous usage data.
- Marketing Cookies: Used to track visitors across websites for advertising purposes. These are only enabled with your consent.
Managing Cookies: You can control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services. Most browsers allow you to:
- View cookies stored on your device
- Delete all or specific cookies
- Block third-party cookies
- Block all cookies from specific sites
11. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:
- Encryption of data in transit using TLS/SSL protocols
- Encryption of sensitive data at rest
- Regular security assessments and vulnerability testing
- Access controls limiting data access to authorized personnel
- Secure authentication mechanisms including multi-factor authentication
- Regular security training for our team members
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, and you use our Services at your own risk.
12. Third-Party Links
Our Services may contain links to third-party websites, applications, or services that are not operated or controlled by Acedify. This Privacy Policy does not apply to third-party sites, and we are not responsible for their privacy practices or content.
We encourage you to review the privacy policies of any third-party sites you visit before providing any personal information. The inclusion of a link does not imply endorsement of the linked site by Acedify.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will:
- Update the "Effective Date" at the top of this page
- Notify you via email or prominent notice on our Services for significant changes
- Provide you the opportunity to review the changes before they become effective
Your continued use of our Services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to periodically review this page for the latest information on our privacy practices.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: support@acedify.com
For residents of the European Economic Area, you also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.
We are committed to working with you to resolve any complaints or concerns about your privacy. We will respond to all inquiries within 30 days.