Privacy Policy

1. Introduction

VantageEA ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at vantageea.com.

By using VantageEA, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

Information You Provide

We collect information that you voluntarily provide when you:

• Create an Account: Name, email address, and password
• Subscribe to a Plan: Payment information (processed by Paddle, see below)
• Contact Us: Name, email, subject, and message content
• Use Our Service: Test responses, performance data, and study preferences

Automatically Collected Information

When you use VantageEA, we automatically collect certain information, including:

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, referring URLs
• Performance Data: Test scores, completion times, question responses
• Cookies and Tracking: Session identifiers and preferences (see Section 7)

Information We Do NOT Collect

We do not collect:

• Social Security Numbers or government-issued ID numbers
• Full credit card numbers (handled by Paddle)
• Sensitive personal information unrelated to exam preparation

3. How We Use Information

We use your information for the following purposes:

Service Delivery

• Create and manage your account
• Provide access to mock exams and study materials
• Track your test performance and progress
• Deliver personalized study recommendations

Communication

• Send account-related notifications (password resets, subscription status)
• Respond to your inquiries and support requests
• Send important service updates and announcements
• Provide marketing communications (with your consent, opt-out available)

Improvement and Analytics

• Analyze usage patterns to improve our service
• Monitor and improve exam question quality
• Develop new features and content
• Ensure platform security and prevent fraud

Legal Compliance

• Comply with legal obligations and regulations
• Enforce our Terms and Conditions
• Protect our rights and the rights of our users

4. Information Sharing

We do not sell your personal information to third parties. We share your information only in the following circumstances:

Service Providers

We share information with trusted third-party service providers who assist us in operating our platform:

• Paddle.com: Payment processing and subscription management (Merchant of Record)
• Supabase: Authentication services and database hosting
• Vercel: Website hosting and content delivery
• Email Services: Transactional and marketing email delivery

These service providers are contractually obligated to protect your information and use it only for the services they provide to us.

Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government or regulatory requests
• Protection of our rights, property, or safety
• Investigation of fraud or security issues

Business Transfers

If VantageEA is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

Technical Safeguards

• Encryption: All data transmitted between your device and our servers uses SSL/TLS encryption
• Secure Storage: Passwords are hashed using industry-standard algorithms
• Access Controls: Limited employee access to personal data on a need-to-know basis
• Regular Audits: Periodic security assessments and vulnerability testing

Payment Security

We do not store credit card information on our servers. All payment processing is handled by Paddle.com, a PCI DSS compliant payment processor. Your payment information is transmitted directly to Paddle's secure servers.

Limitations

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to maintain reasonable safeguards.

Data Retention

We retain your personal information for as long as necessary to provide you with our services and as required by applicable laws. Our retention practices include:

• Active Accounts: Data is retained while your account is active
• After Account Deletion: Personal information is deleted within 90 days of account closure
• Aggregated Data: Anonymized, aggregated data may be retained indefinitely for analytics
• Legal Requirements: Certain data may be retained longer if required by law or for legitimate business purposes (billing records, dispute resolution)

6. Your Rights

You have certain rights regarding your personal information. Depending on your location, these rights may include:

Access and Portability

• Access: Request a copy of the personal information we hold about you
• Data Portability: Receive your data in a structured, machine-readable format

Correction and Deletion

• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal information (subject to legal obligations)

Control and Objection

• Opt-Out: Unsubscribe from marketing emails (account emails still apply)
• Restrict Processing: Limit how we use your information
• Object: Object to processing based on legitimate interests

How to Exercise Your Rights

To exercise any of these rights, please contact us at support@vantageea.com. We will respond to your request within 30 days. You may also manage some of your information directly from your account settings.

7. Cookies & Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device that help us provide and improve our service. We use both session cookies (expire when you close your browser) and persistent cookies (remain until deleted or expired).

Types of Cookies We Use

• Essential Cookies: Required for basic functionality like authentication and security. These cannot be disabled.
• Performance Cookies: Help us understand how users interact with our platform to improve user experience.
• Preference Cookies: Remember your settings and preferences (language, layout).
• Analytics Cookies: Collect aggregated data about site usage and traffic sources.

Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Note that disabling cookies may limit your ability to use certain features of VantageEA.

8. Third-Party Services

We use the following third-party services that may collect information about you:

Paddle (Payment Processor)

Paddle.com acts as our Merchant of Record and handles all payment processing. When you subscribe, your payment information is sent directly to Paddle and is not stored on our servers. Paddle's privacy practices are governed by their own privacy policy.

Supabase (Authentication & Database)

Supabase provides authentication services and database hosting for VantageEA. Your account information and test data are stored securely on Supabase's infrastructure. Supabase is SOC 2 Type II compliant and follows industry-standard security practices.

Vercel (Hosting)

Vercel hosts our website and application. They may collect technical information such as IP addresses and access logs for performance and security purposes.

Analytics Services

We may use analytics services to understand how users interact with our platform. These services collect aggregated, non-personally identifiable information about usage patterns and traffic sources.

9. Children's Privacy

VantageEA is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@vantageea.com, and we will delete that information from our systems.

Users between the ages of 13 and 18 must have parental or guardian consent before using VantageEA.

10. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this page.

Notification of Changes

For material changes to this Privacy Policy, we will provide notice through one or more of the following methods:

• Email notification to your registered email address
• Prominent notice on our website
• In-app notification when you log in

Your continued use of VantageEA after the effective date of changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Business Name: Shivam Ralli
• Address: Green Glen Layout, Bellandur
  Bangalore, Karnataka 560103
  India
• Email: support@vantageea.com
• Website: vantageea.com
• Response Time: We aim to respond to all inquiries within 24 hours

Data Protection and Privacy Rights

For privacy-related concerns or to exercise your data rights under applicable laws (including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023), you may contact us at support@vantageea.com.

Governing Law

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts in Bangalore, Karnataka, India.