Privacy Policy

This Privacy Policy explains what personal data Ready to Ace collects, why, and what rights you have under the General Data Protection Regulation (GDPR).

1. Data we collect

• Account data: name, email address and an encrypted password.
• Profile: your target role, industry, target company and level (optional).
• Usage data: test results, scores and progress.
• Payment data: subscription status. Card details are handled by LemonSqueezy — we never store them.

2. Why we process this data

We use your data to provide the Service (account, tests, personalized recommendations), to process payments, to communicate about your account (such as email verification and password recovery), and to secure and improve the Service. The legal basis is the performance of our contract with you and our legitimate interest in a secure, functioning service.

3. Subprocessors

We share data with the following processors, solely to operate the Service:

• Neon — database hosting (EU, Frankfurt)
• Fly.io — backend hosting
• Vercel — frontend hosting
• LemonSqueezy — payment processing
• Resend — transactional email
• Anthropic — AI test generation (no user personal data)
• Sentry — error monitoring

4. Retention

We retain your data for as long as your account is active. When you delete your account, we permanently erase your profile, test results and associated data.

5. Cookies

We use a single strictly necessary cookie: a secure httpOnly cookie that maintains your session (refresh token). Because this cookie is required to log in, no consent banner is needed. We use no tracking or advertising cookies.

6. Your rights

Under the GDPR you have the right to:

• Access and export: download all your data from Settings.
• Erasure: delete your account and all data from Settings.
• Rectification: update your profile data in the app.
• Objection/complaint: you may lodge a complaint with your supervisory authority.

7. Contact

Questions about your data? Contact us at support@ready-to-ace.com.