Privacy Policy

1. Introduction

Zvsquared ("we", "us", or "our") operates the Zvsquared learning platform accessible at zvsquared.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please stop using the Service.

2. Information We Collect

We collect information you provide directly to us, information collected automatically when you use the Service, and information from third-party sources.

• Account data: email address, display name, and authentication identifiers when you create an account.
• Profile data: study preferences, notification settings, and other optional information you add to your profile.
• Learning and interview data: session history, problem attempts, answers, AI-generated feedback, scores, transcripts, and progress records.
• Billing data: plan, subscription status, Stripe customer and subscription identifiers, and payment event records. Payment-card details are collected and handled by Stripe, not by Zvsquared.
• Device & log data: IP address, browser type and version, operating system, referring URLs, and timestamps.
• Cookies & similar technologies: see our Cookie Policy for details.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate you.
• Deliver, personalise, secure, and improve the learning experience.
• Track your progress and generate performance reports.
• Process interview answers and related context to generate AI-assisted feedback and assessments.
• Process payments, subscriptions, cancellations, and billing support.
• With your permission, measure acquisition, activation, feature usage, and product reliability using privacy-limited analytics.
• Send transactional emails such as account confirmations, password resets, and billing notices.
• Detect, investigate, and prevent fraudulent or abusive use.
• Comply with legal obligations.

We do not sell personal data or use it for targeted advertising.

4. Third Parties and Processors

We share your data only with trusted service providers who process it on our behalf in accordance with this policy. Current processors include:

• Supabase, Inc.— database, authentication, and storage infrastructure. See Supabase's Privacy Policy.
• Anthropic, PBC— AI inference for interview feedback and assessment. Relevant session content is sent to Anthropic when you use AI-assisted features. See the Anthropic Privacy Center.
• Stripe, Inc.— checkout, payment processing, subscription management, and fraud prevention. See Stripe's Privacy Policy.
• Vercel, Inc.— hosting, application delivery, and operational logs. See Vercel's Privacy Notice.
• PostHog, Inc.— optional product and web analytics. PostHog receives limited usage events only after analytics consent; we disable autocapture and session replay and exclude interview answers, transcripts, notebook text, email addresses, and AI responses from analytics event properties. See PostHog's Privacy Policy.

We require all processors to maintain appropriate security measures and to process data only on our documented instructions.

5. International Data Transfers

Our service providers operate internationally, so your information may be processed outside your country. Where required, we use contractual and other safeguards intended to protect transferred personal data.

6. Data Retention

We retain personal data for as long as reasonably necessary to provide the Service, maintain security, resolve disputes, and meet legal, tax, and accounting obligations. You may request account and data deletion by contacting us. We will delete or anonymise data unless we must retain it for a legitimate legal or operational reason. Service providers may retain data under their own published policies and our agreements with them.

7. Legal Bases

Where data-protection law requires a legal basis, we process data as needed to perform our contract with you, comply with law, protect our legitimate interests in operating and securing the Service, and, where applicable, based on your consent.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing (e.g. direct marketing).
• Receive your data in a portable, machine-readable format.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@zvsquared.com. We will respond within the period required by applicable law and may need to verify your identity before completing a request.

9. Security

We use technical and organisational safeguards designed to protect personal data, including encrypted transport and access controls. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

10. Children

The Service is not directed to individuals under 13 years of age. We do not knowingly collect personal data from children under 13. If a higher minimum age applies where you live, you may use the Service only with any consent required by local law. Contact us if you believe a child has provided personal data without the required consent.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice on the Service before the change takes effect when required by law.

12. Contact

Questions or requests regarding this policy should be directed to:

Zvsquared
support@zvsquared.com