Privacy Notice

1. Who we are

ACEIT ("ACEIT", "we", "us") operates the ACEIT practice-exam service. ACEIT is the data controller for the personal data described in this notice — we decide why and how it is processed. Contact: support@aceitexam.com.

2. Data we collect and why

• Account data (email address, login credentials, display name, sign-in provider) — to create and secure your account and authenticate you. Legal basis: performance of our contract with you.
• Study data (exams generated, questions answered, scores, attempt history, saved preferences) — to deliver the service and show your progress. Legal basis: performance of our contract.
• Prompts and inputs you submit to generate practice material — processed by our AI provider to return results. Legal basis: performance of our contract.
• Subscription status (plan tier, renewal state, referral codes) — to give you the access you paid for. Legal basis: performance of our contract.
• Support messages you send us — to answer you and improve the service. Legal basis: legitimate interests.
• Usage, device and log data (IP address, browser type, pages viewed, error reports) — for security, abuse and fraud prevention, reliability and product improvement. Legal basis: legitimate interests.
• Marketing communications, where you opt in. Legal basis: consent, which you can withdraw at any time.

Where we are required to keep records (for example tax or accounting), the legal basis is compliance with a legal obligation.

3. Payments

Purchases are handled by Paddle.com, our reseller and Merchant of Record. Paddle collects and processes payment details directly under its own privacy notice; we never receive or store your full card details. We receive only the subscription status associated with your account.

4. Who we share data with

• Service providers and subprocessors — hosting, database and authentication providers, AI model providers, analytics and error monitoring, and support tooling.
• Paddle, as Merchant of Record, for sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as legal and accounting providers, where necessary.
• Authorities and regulators where we are required to disclose by law.
• An acquirer, in connection with a merger, acquisition or asset sale.

We do not sell your personal data.

5. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.

6. Retention

We keep account and study data for as long as your account is active, and for a short period afterwards to handle disputes and reinstatement requests. Log and security data is typically kept for up to 12 months. Transaction and tax records are kept for as long as the law requires. After that, data is deleted or anonymised.

7. Your rights

Subject to local law, you can request access to your data, correction of inaccurate data, erasure, restriction of processing, portability, and you can object to processing based on legitimate interests or withdraw consent at any time. Email support@aceitexam.com and we will respond within one month. If you are in the UK or EEA, you also have the right to complain to your local supervisory authority.

8. Security

We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls on our database, restricted administrative access and regular security review. No system is completely secure, so please use a strong, unique password.

9. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in, remember your language and study preferences, and protect against abuse. Where we use analytics or performance cookies, they are limited to understanding aggregate usage. You can clear or block cookies in your browser settings, but sign-in will not work without the essential ones.

10. Children

ACEIT is not directed at children under 13 (or the minimum age in your country). If you believe a child has provided us data, contact us and we will delete it.

11. Changes

We may update this notice and will post the revised version here with a new date.