Privacy Policy

1. Data Controller

Data controller within the meaning of the GDPR:

Mohammed Hakimi Schwalbenstraße 15 63263 Neu-Isenburg Germany Email: contact.analystvault@gmail.com

2. Data Collected

We collect and process the following personal data:

• Email address and name upon registration.

• Payment data is processed exclusively by Stripe Inc. We do not store credit card or bank details.

• Usage data: evaluation scores, case progress, and session data.

• Technical data: IP address and browser type — for security purposes only.

3. Legal Basis

• Art. 6(1)(a) GDPR (Consent) — Registration.

• Art. 6(1)(b) GDPR (Contract performance) — Providing the service.

• Art. 6(1)(f) GDPR (Legitimate interest) — Security and fraud prevention.

4. Third-Party Services

• Stripe Inc. (USA) — Payment processing. Data transfers via Standard Contractual Clauses (SCC) per Art. 46(2)(c) GDPR.

• Vercel Inc. (USA) — Hosting. Data transfers via SCC.

• DeepSeek / Anthropic — AI evaluation. Your answer text is transmitted for grading. No personal data beyond the answer text.

5. Cookies

We use only technically necessary cookies (NextAuth.js session token).

No tracking, analytics, or advertising cookies.

6. Data Subject Rights

You have the following rights:

• Access (Art. 15 GDPR)

• Rectification (Art. 16 GDPR)

• Erasure (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Objection (Art. 21 GDPR)

Contact: contact.analystvault@gmail.com

7. Supervisory Authority

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit Gustav-Stresemann-Ring 1 65189 Wiesbaden, Germany

8. Data Security

• HTTPS encryption for all data transmission.

• Passwords hashed with bcrypt.

• Database access restricted to authenticated users.

9. Changes

We may update this privacy policy. The current version is always available at this URL.