AI CRED ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI fluency assessment platform. Please read this policy carefully. By using AI CRED, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Password (stored securely using industry-standard hashing)
• First and last name
• Username (for public profile, if enabled)
• Profile photo (optional)
• Work experience and professional background (optional)

Evaluation Data

During assessments, we collect:

• Your responses during AI evaluation conversations
• Assessment scores (on a 1-10 scale across six competency categories)
• AI-generated feedback and learning recommendations
• Timestamps and session metadata

Payment Information

When you purchase credits, we collect:

• Transaction records (purchase date, amount, credits purchased)
• Payment method details are processed and stored securely by Stripe; we do not store your full credit card number

Technical Information

We automatically collect certain technical information, including IP address, browser type, device information, and usage patterns to improve our services and maintain security.

2. How We Use Your Information

We use the information we collect to:

• Provide our services: Conduct AI fluency evaluations, generate scores, and create personalized learning plans
• Process transactions: Manage credit purchases, subscriptions, and refunds
• Improve our platform: Analyze usage patterns to enhance our AI models and user experience
• Communicate with you: Send account-related notifications, respond to inquiries, and provide customer support
• Maintain security: Detect and prevent fraud, abuse, and unauthorized access
• Enable public profiles: Display your information on leaderboards and public profile pages (only when you opt in)

3. Data Storage and Security

We take data security seriously and implement multiple layers of protection:

• Infrastructure: Your data is stored securely using Supabase, which provides enterprise-grade PostgreSQL databases with encryption at rest and in transit
• Authentication: We use secure authentication protocols with encrypted password storage and optional multi-factor authentication
• Access controls: We implement Row Level Security (RLS) policies to ensure users can only access their own data
• Regular audits: We conduct regular security reviews and maintain compliance with industry best practices

4. Third-Party Services

We use trusted third-party services to operate our platform:

Stripe (Payment Processing)

We use Stripe to securely process payments. Stripe is PCI-DSS compliant and handles all payment card data. We never store your complete card information on our servers. See Stripe's Privacy Policy.

AI Providers (Evaluation Processing)

We use AI language models from Anthropic (Claude) and Google (Gemini) to conduct evaluations and generate feedback. Your evaluation conversations are processed by these services to provide scores and recommendations. These providers have their own privacy policies:

• Anthropic Privacy Policy
• Google Privacy Policy

Supabase (Database and Authentication)

We use Supabase for database storage and user authentication. See Supabase's Privacy Policy.

5. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information through your account settings or by contacting us
• Deletion: Request deletion of your account and associated data. Note that some data may be retained for legal or legitimate business purposes
• Data portability: Request an export of your evaluation data in a machine-readable format
• Opt-out: Withdraw consent for optional data processing, such as marketing communications

To exercise these rights, please contact us at the email address provided in the Contact Information section below.

6. Profile Visibility

AI CRED offers optional public profiles. You have full control over your profile visibility:

• Private (default): Your profile, scores, and evaluation history are visible only to you
• Public: When enabled, your profile page becomes accessible via your username URL, and you may appear on the public leaderboard

You can change your profile visibility at any time in your account settings. Making your profile private will immediately remove you from the public leaderboard and make your profile page inaccessible to others.

7. Cookies and Tracking

We use minimal cookies necessary for the operation of our platform:

• Essential cookies: Required for authentication and maintaining your session while using the platform
• No advertising cookies: We do not use third-party advertising or tracking cookies
• No cross-site tracking: We do not share your browsing data with advertising networks

8. Children's Privacy

AI CRED is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child under 13, please contact us immediately.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Account data: Retained until you request account deletion
• Evaluation data: Retained to provide historical score tracking and progress visualization
• Payment records: Retained as required by financial regulations and for audit purposes

After account deletion, we may retain anonymized or aggregated data for analytics and service improvement purposes.

10. International Data Transfers

AI CRED is operated from the United States. If you are accessing our services from outside the United States, please be aware that your data may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using AI CRED, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically. Your continued use of AI CRED after changes become effective constitutes your acceptance of the revised policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.