Privacy Policy

We collect different categories of data depending on how you use the Service:

• Account data: first and last name, email address, password (stored in hashed form), preferred language and, where applicable, information provided through a third-party login;
• Usage data: exams viewed, answers and scores on practice tests, progress, bookmarks, forum posts, comments, and interactions with support;
• Payment data: purchase type, amount, currency, and transaction status; your actual card details (card number, security code) are entered and processed directly by our payment provider, Stripe, and never pass through our servers;
• Technical data: IP address, device and browser type, connection logs, and cookies (see section 5).

We use your personal data to:

• create and manage your account, and give you access to the Service's features;
• process your purchases and subscriptions, and send you the corresponding receipts and confirmations;
• track your progress and personalize your learning experience;
• send you transactional emails (account confirmation, password reset, exam-related notifications) via our email delivery provider;
• keep the Service secure, prevent fraud, and enforce our Terms and Conditions;
• respond to your support requests and improve the quality of the Service.

Where the General Data Protection Regulation (GDPR) or an equivalent regulation applies to you, we process your data on the following legal bases: performance of the contract between us (providing the Service you signed up for), your consent (for example, for certain non-essential cookies), our legitimate interest (security, improving the Service, fraud prevention) and, where applicable, compliance with a legal obligation.

We never sell your personal data. We share it only with the following categories of recipients, strictly to the extent necessary to provide the Service:

• Stripe, for secure payment processing;
• our transactional email delivery provider, for sending communications related to your account;
• our hosting provider and technical infrastructure partners, to host and operate the Service;
• competent authorities, where required by law or to protect our rights, safety, or that of our users.

We use cookies and similar technologies to keep you signed in, remember your preferred language, measure Service usage, and improve how it works. You can configure your browser at any time to reject non-essential cookies; some features of the Service may, however, stop working correctly.

We keep your personal data for as long as your account is active and as necessary to provide you with the Service. When you close your account, your data is deleted or anonymized within a reasonable time, unless longer retention is required to comply with a legal, accounting, or tax obligation, or to resolve a dispute.

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration, including encryption of communications (HTTPS), hashing of passwords, and restricted access to data within our teams. As no method of transmission or storage is completely secure, we cannot, however, guarantee absolute security.

Depending on the regulation applicable to you, you have, in particular, the following rights over your personal data: the right to access, rectify, erase, restrict processing of, port, and object to the use of your data. You may also withdraw your consent at any time where processing relies on it.

To exercise any of these rights, contact us at info@xonicerti.com. We will respond to your request within the timeframe required by applicable regulation, after reasonably verifying your identity.

You may request deletion of your account at any time from your "Settings" area or by writing to info@xonicerti.com. Deletion results in the erasure of your profile and progress data, subject to any data we must retain for legal reasons, including accounting purposes.

The Service is not intended for individuals under 16 years of age, or the minimum age required in their jurisdiction. We do not knowingly collect personal data about minors below that age. If you believe a minor has provided us with personal data without the required consent, please contact us so we can remove it.

Our service providers (hosting, payment, email delivery) may process data from countries outside your country of residence. Where this is the case, we ensure that such providers offer an appropriate level of protection for personal data, consistent with applicable requirements.

We may amend this Privacy Policy to reflect changes to the Service, our practices, or applicable regulation. Any material change will be notified to you by email or through the Service. The last-updated date appears at the top of this page.

For any question regarding this Privacy Policy or the processing of your personal data, you may contact us at info@xonicerti.com.