Privacy Policy

1. Introduction

AIsance ("the Service") is operated by Yannick Hofmeister ("we," "us," or "our"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Service. We are committed to handling your data responsibly and in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data We Collect

We collect the following categories of personal data:

• Account information: Your email address and encrypted password when you register.
• Assessment responses:The full transcript of your conversation during the AI fluency assessment, including your questions, answers, and the AI facilitator's messages.
• Assessment results: Scores, grader analysis, and personalized roadmaps generated from your assessment.
• Payment information: Stripe processes your payment details directly. We receive only a transaction reference, the amount paid, and your Stripe customer ID. We never see or store your full card number.
• Usage data: Basic analytics (page views, device type, browser) collected via Vercel Analytics to improve the Service.

3. How We Use Your Data

We use your personal data to:

• Provide and operate the assessment service
• Process your conversation through AI (Anthropic Claude) to generate scores and recommendations
• Process payments and manage your credit balance
• Store your assessment history so you can review past results
• Communicate with you about your account, including transactional emails
• Improve the Service through aggregated, anonymized usage analytics

4. Third-Party Processors

We share data with the following third-party services, each acting as a data processor on our behalf:

• Supabase (database and authentication) — stores your account, assessment data, and conversation drafts. Data is hosted in cloud infrastructure with encryption at rest and in transit.
• Anthropic (AI processing) — your assessment conversation is sent to the Anthropic API to facilitate the assessment and generate scores. Anthropic does not use your data to train its models under our agreement.
• Stripe (payment processing) — handles credit card transactions securely. Stripe is PCI DSS Level 1 certified.
• Vercel (hosting and analytics) — hosts the application and collects anonymized usage analytics.

5. Data Storage and Security

Your data is stored in Supabase-managed PostgreSQL databases with Row Level Security (RLS) enabled, ensuring you can only access your own data. All connections use TLS encryption. Passwords are hashed using industry-standard algorithms. We retain your data for as long as your account is active. Assessment data is retained indefinitely to allow you to access your history, unless you request deletion.

6. Cookies and Local Storage

The Service uses essential cookies for authentication (session tokens managed by Supabase Auth) and theme preference (light/dark mode). We do not use advertising or tracking cookies. Vercel Analytics uses a privacy-focused, cookie-free approach for usage measurement.

7. Your Rights

Under the GDPR and applicable data protection laws, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete personal data
• Deleteyour personal data ("right to be forgotten")
• Export your data in a portable format
• Restrict processing in certain circumstances
• Object to processing based on legitimate interests
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at hi@yannickhofmeister.com. We will respond within 30 days.

8. Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our third-party processors operate. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses where applicable.

9. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the email address associated with your account or by a prominent notice on the Service. The "Last updated" date at the top of this page reflects the most recent revision.