Privacy Policy

1. Information We Collect

Information You Provide

• Email address, name, and account credentials
• Payment information (processed securely through Stripe)
• Practice responses and content you submit
• Video recordings of your answers, including your image and voice, for scenarios you choose to answer on camera
• Communications you send to us

Information Collected Automatically

• Device information (IP address, browser, operating system)
• Pages visited, time spent, and navigation patterns
• Date, time, and referring source of visits
• Scenarios accessed and practice session data
• Performance metrics and scores

Information from Third Parties

If you sign in via a third-party provider (such as Google), we receive profile information you authorize them to share.

2. How We Use Your Information

• Provide the Service: Create accounts, process transactions, and deliver features
• Process Payments: Securely handle transactions through Stripe
• Generate AI Feedback: Process your practice responses to provide personalized feedback and scores
• Improve the Service: Analyze usage patterns, fix issues, and develop new features
• Communicate: Send service-related emails, updates, and security alerts
• Ensure Security: Monitor for fraudulent or illegal activity
• Comply with Law: Meet legal obligations and respond to lawful requests

3. AI Processing

Our Service uses artificial intelligence to evaluate your practice responses. By using the Service, you acknowledge that:

• Your responses are processed by AI systems to generate feedback
• We may use third-party AI providers bound by confidentiality obligations
• AI feedback is for educational purposes only and does not guarantee actual test performance
• AI feedback may contain errors and is not an official Casper score or an evaluation by Acuity Insights

We do not use your practice responses or video recordings to train or improve AI models, ours or anyone else's. We may analyze aggregate usage statistics, such as how many scenarios are attempted, to improve the Service; this analysis does not use the content of your answers.

We protect the confidentiality of your practice responses and do not sell your content to third parties.

4. Video Recordings and Biometric Data

Some scenarios ask you to answer on camera. Recording is optional and you choose when to start it; text-based scenarios never access your camera or microphone. Because a recording captures your face and voice, we treat it as sensitive information and handle it under the rules below. This section is our written policy for retaining and destroying that data.

What we collect and why

When you submit a video answer, we store the recording for the sole purpose of generating AI feedback on that response. We do not use it for identification, verification, or any other purpose.

How we handle it

• Your recordings are processed only by the automated grader; no member of our staff watches them, except in the rare case where we are legally compelled to produce them
• Your recordings are never used to train or improve AI models, ours or anyone else's
• We do not sell, lease, trade, or otherwise profit from your recordings or any biometric information they contain
• We do not disclose recordings to anyone except the third-party AI provider that generates your feedback, and where disclosure is required by law

Retention and destruction

We delete your recording as soon as feedback for that response has been generated. If you delete the submission or your account before that point, the recording is destroyed then instead. We do not retain recordings beyond these points.

Your choices

You can use text-based scenarios only and never create a recording. You can delete any submission, and its recording, from the My Submissions page at any time.

5. Cookies

We use cookies and similar technologies to operate the Service:

• Essential: Required for authentication and core functionality
• Preference: Remember your settings and choices
• Analytics: Help us understand how the Service is used, through PostHog and Vercel Analytics

We do not use advertising cookies, and we do not permit third parties to track you across other websites for advertising purposes.

You can configure your browser to refuse cookies, but some features may not function properly.

6. Service Providers

We share information with third-party providers who help operate the Service:

• Stripe: Payment processing
• Supabase: Database, authentication, and file storage
• Vercel: Website hosting and delivery
• PostHog: Product analytics
• AI Providers: Processing responses and generating feedback

Only our AI provider receives the content of your practice responses or recordings, and only to generate your feedback. Our hosting, analytics, and payment providers do not receive that content.

These providers are contractually obligated to use your information only for specified purposes.

7. Data Retention

• Account Data: Retained while your account is active and for a reasonable period thereafter
• Practice Data: Retained to provide ongoing access to your history and progress
• Video Recordings: Deleted as soon as feedback for that response has been generated, or earlier if you delete the submission or your account
• Payment Records: Retained as required by law (typically 7 years)
• Usage Data: Retained for up to 2 years, then aggregated or deleted

When you delete your account we delete or anonymize the personal data associated with it, except records we are required to keep by law, such as payment and tax records.

8. Data Security

We implement reasonable security measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Secure authentication protocols
• Access controls and monitoring

No method of transmission is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

9. Your Rights

Depending on your location, you may have the right to:

• Access a copy of your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Request data portability
• Opt out of promotional communications
• Delete your account

To exercise these rights, contact us at support@studycasper.com

10. United States State Privacy Rights

Residents of California and of other states with comprehensive privacy laws have additional rights:

• Right to know what personal data we collect, use, and disclose
• Right to request correction of inaccurate personal data
• Right to request deletion of personal data
• Right to request a portable copy of your personal data
• Right to non-discrimination for exercising privacy rights

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We have not done so in the preceding twelve months.

To exercise any of these rights, contact us at support@studycasper.com. We may need to verify your identity before acting on a request.

11. Canada and Australia

If you use the Service from Canada, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). If you use the Service from Australia, we handle it in accordance with the Australian Privacy Principles under the Privacy Act 1988.

In either case you may request access to the personal information we hold about you, ask us to correct it, or raise a concern about how we have handled it, by contacting support@studycasper.com. Your information is stored and processed in the United States, as described in the next section.

12. International Transfers

Your information may be transferred to and processed in the United States, where data protection laws may differ from your jurisdiction. By using the Service, you consent to this transfer.

13. Children's Privacy

The Service is intended for adults preparing for professional school admissions and is not directed to anyone under 18. We do not knowingly collect personal data, including video recordings, from anyone under 18. If you believe someone under 18 has provided us with personal data, contact us at support@studycasper.com and we will delete it.

14. Third-Party Links

The Service may link to third-party websites. We have no control over and assume no responsibility for their content or privacy practices. Review their policies before providing information.

15. Disclosure of Data

We may disclose your data:

• Business Transactions: In connection with a merger, acquisition, or asset sale
• Legal Requirements: To comply with law, subpoenas, or court orders
• Protection: To protect our rights, property, or safety of users

16. Do Not Track

The Service does not currently respond to "Do Not Track" browser signals due to lack of uniform standards.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy, sending an email, or displaying a notice on the Service. Your continued use constitutes acceptance of any changes.

18. Contact

Questions about this Privacy Policy? Contact StudyCasper LLC at support@studycasper.com