Privacy Policy

This Privacy Policy explains how TEFCanadaPractice ("we", "us", or "our"), the operator of tefcanadapractice.com (the "Service"), collects, uses, shares, and protects your personal information, and the rights you have. It applies to everyone who visits the site or creates an account. By using the Service you agree to this Policy. If you do not agree, please do not use the Service.

TEFCanadaPractice is the controller responsible for your personal information for the purposes of this Policy. For any privacy question or request, or to reach our grievance contact, email info.tefcanadapractice@gmail.com.

We collect the following categories of information:

• Account information — your name, email address, and password (stored only in hashed form by our authentication provider).
• Practice activity — your progress, answers, scores, drafts, and estimated levels across the modules.
• Content you create — voice recordings (speaking module) and written submissions (writing module) that you choose to save. When you request AI Examiner feedback, the relevant text or recording is sent to our AI provider to generate that feedback, which we then store on your account.
• Purchase information — records of your purchases (amount, currency, date, order and payment identifiers, and access period). Payments are processed by Razorpay; we do not collect or store your full card, UPI, or bank details.
• Usage and device data — pages viewed, actions taken, approximate location (country/region, from your IP address), device type, browser, and similar technical data, collected through analytics and server logs.
• Cookies and similar technologies — see Section 7.

We collect information you provide directly (for example, when you register, save a recording, or contact us); automatically as you use the Service (through cookies, analytics, and logs); and from our service providers (for example, payment status from Razorpay).

• to create and manage your account and provide the Service;
• to save and show your progress, recordings, and submissions;
• to process purchases and provide access, receipts, and support;
• to send service-related emails (verification, password reset, receipts, and account or security notices);
• to understand and improve how the Service is used, and to keep it secure and prevent abuse or fraud; and
• to comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use it for third-party advertising.

Where the GDPR or similar laws apply, we rely on: performance of our contract with you (to provide the Service you sign up and pay for); your consent (for non-essential analytics cookies, which you can withdraw at any time); our legitimate interests (to secure and improve the Service and prevent abuse); and compliance with legal obligations.

We use essential cookies to keep you signed in and to remember preferences such as your interface language and your cookie choice. With your consent, we also use Google Analytics cookies to understand how the Service is used so we can improve it. When you first visit, a banner lets you accept or decline analytics cookies, and analytics stay disabled until you accept. You can change your choice by clearing your browser storage for our site. Essential cookies are always required for the Service to function.

We share personal information only as needed to run the Service, with providers who process it on our behalf under their own privacy and security terms:

• Supabase — authentication, database, and file storage;
• Razorpay — payment processing;
• Resend — transactional and account email delivery;
• Google Analytics — usage analytics (with your consent);
• Vercel — website hosting and delivery;
• OpenAI — AI feedback and speech-to-text for the AI Examiner, used only when you request AI feedback. Content sent to OpenAI's API is not used to train its models and is retained only briefly for abuse monitoring.

We may also disclose information if required by law, to respond to lawful requests, to protect our rights, safety, or property or those of others, or in connection with a business transfer (such as a merger or acquisition). We do not sell your data.

Our providers may store and process data on servers located outside your country, including in regions such as the United States and the European Union. Where personal data is transferred internationally, we rely on our providers' safeguards and applicable legal transfer mechanisms. This includes AI processing by OpenAI in the United States when you use the AI Examiner. By using the Service you understand your information may be processed in these locations.

We keep your personal information for as long as your account is active or as needed to provide the Service, and thereafter only as required to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. Purchase records may be retained longer where required by law. When you delete your account, your profile, progress, saved recordings, and related data are deleted, subject to any records we must retain by law.

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), hashed passwords, access controls, and private storage for your voice recordings (accessible only to you via time-limited links). No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to address issues promptly.

Depending on your location, you may have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, to request portability, and to withdraw consent (for example, for analytics). You can:

• update your details and delete recordings from within the Service;
• delete your entire account (and its data) from your Account page; and
• contact us at info.tefcanadapractice@gmail.com to exercise any other right or to raise a grievance. We will respond within the time required by applicable law.

You may also lodge a complaint with your local data-protection authority if you believe your rights have been infringed.

The Service is intended for users who are old enough to prepare for the TEF Canada exam and is not directed at children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact us and we will delete it.

The Service may contain links to third-party websites or services that we do not control. This Policy does not apply to those sites, and we are not responsible for their practices. Please review their privacy policies.

We may update this Policy from time to time. When we do, we will change the "Last updated" date above and, for significant changes, take reasonable steps to notify you. Your continued use of the Service after changes are posted means you accept the updated Policy.

For any privacy question, request, or complaint, contact us at info.tefcanadapractice@gmail.com.