Privacy Policy

1. Introduction

Welcome to Builder Exam Prep ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

This policy applies to all users in Australia and internationally. We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. Information We Collect

2.1 Personal Information

• Email address (when you create an account)
• Account credentials (username, encrypted password)
• Payment information (processed securely by Stripe; we do not store card details)

2.2 Usage Data

• Study progress, quiz scores, and answer history
• AI chat conversation content (for providing the service)
• Device identifiers (for anonymous usage tracking)
• Browser type, IP address, and access timestamps

3. How We Use Your Information

• Provide and maintain our exam preparation services
• Process payments and manage subscriptions via Stripe
• Sync your study data across devices
• Generate AI-powered study responses and quiz questions
• Improve our question bank and service quality
• Send essential service notifications (not marketing, unless you opt in)

4. Data Storage & Security

• Data is stored securely using Supabase (hosted on AWS infrastructure)
• All data transmission is encrypted via HTTPS/TLS
• Payment processing is handled by Stripe (PCI DSS Level 1 certified)
• We implement industry-standard security measures to protect your data

5. Third-Party Services

We use the following third-party services:

• Stripe — Payment processing
• Supabase — Database and authentication
• AI Services — For generating study responses (conversations may be processed by AI models)

Each third-party service has its own privacy policy. We encourage you to review them.

6. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access your personal data that we hold
• Request correction of inaccurate data
• Request deletion of your account and data
• Opt out of non-essential communications
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise these rights, contact us at the email address below.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account or request data deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

8. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us through the website.