Privacy Policy

1. Introduction and Scope

Mindscore ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

This policy applies to all users of our Service, including visitors, registered users, and test takers. By using our Service, you consent to the data practices described in this policy.

2. Information We Collect

We collect several types of information from and about users of our Service:

2.1 Account Information

• Email address (required for account creation)
• Name (optional, may be collected for certificates)
• Password (encrypted and stored securely)
• Account preferences and settings

2.2 Test Data

• Test responses and answers
• Test completion times and patterns
• Test results and scores
• Certificates and reports generated

2.3 Payment Information

Payment information is processed securely through Stripe, our third-party payment processor. We do not store your complete credit card information on our servers. We only receive:

• Payment confirmation and transaction IDs
• Billing email address
• Payment amount and date

2.4 Usage Data

We automatically collect certain information when you use our Service:

• IP address and location data
• Browser type and version
• Device information
• Pages visited and time spent
• Referring website addresses
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing Services: To deliver test assessments, generate results, and provide certificates
• Account Management: To create and manage your account, authenticate users, and process transactions
• Communication: To send test results, respond to inquiries, and provide customer support
• Service Improvement: To analyze usage patterns, improve test accuracy, and enhance user experience
• Security: To detect and prevent fraud, abuse, and unauthorized access
• Legal Compliance: To comply with legal obligations and respond to legal requests
• Research: To conduct anonymized, aggregated research on cognitive assessment patterns

We do not use your information for marketing purposes without your explicit consent, and we never sell your personal data to third parties.

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data is encrypted in transit (SSL/TLS) and at rest
• Secure Servers: Information is stored on secure servers with restricted access
• Access Controls: Only authorized personnel have access to personal data
• Regular Audits: We conduct regular security assessments and updates
• Data Minimization: We only collect and retain data necessary for our services

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active and for a reasonable period after closure
• Test Results: Retained indefinitely to provide lifetime access, unless you request deletion
• Payment Records: Retained as required by law (typically 7 years for tax purposes)
• Usage Data: Retained in anonymized, aggregated form for analytics

You may request deletion of your data at any time through your account settings or by contacting us directly.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

6.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our Service:

• Payment Processing: Stripe (payment information)
• Hosting: Supabase (database and authentication)
• Analytics: Anonymized usage data for service improvement

These providers are contractually obligated to protect your information and use it only for specified purposes.

6.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or legal processes
• Government requests or regulatory requirements
• Protection of rights, property, or safety
• Prevention of fraud or illegal activity

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You have the right to access your personal information and receive a copy of your data in a portable format.

7.2 Correction

You can update or correct your account information at any time through your account settings.

7.3 Deletion

You may request deletion of your account and associated data. We will delete your information except where retention is required by law.

7.4 Opt-Out

You can opt out of non-essential communications and certain data processing activities through your account settings.

7.5 Objection and Restriction

You may object to certain processing activities or request restriction of processing in specific circumstances.

To exercise these rights, please contact us at support@mindscore.com. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and improve our services. For detailed information about our use of cookies, please see our Cookie Policy.

You can control cookies through your browser settings, though disabling certain cookies may affect Service functionality.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will take steps to delete such information.

Users between 13 and 18 should have parental consent before using our Service.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses
• Adequacy decisions where applicable
• GDPR-compliant data processing agreements

11. GDPR Compliance

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data processing
• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

Our legal basis for processing includes: consent, contract performance, legal obligations, legitimate interests, and protection of vital interests.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending email notifications for significant changes
• Displaying notices on our Service

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

14. Contact Information

If you have questions, concerns, or wish to exercise your privacy rights, please contact us:

Email: support@mindscore.com
Subject: Privacy Policy Inquiry
Response Time: We aim to respond within 30 days

For GDPR-related inquiries, you also have the right to lodge a complaint with your local data protection authority.