1. Introduction

EnvolPrep ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CELPIP test preparation service.

2. Information We Collect

We collect the following types of information:

• Account Information: Email address, name, and profile information you provide
• Test Responses: Your written essays, speaking recordings, reading answers, and listening responses
• Usage Data: Test completion statistics, performance metrics, and activity logs
• Technical Data: IP address, browser type, device information, and cookies

3. How We Use Your Information

We use your information to:

• Provide AI-powered feedback on your test responses
• Track your progress and display performance statistics
• Improve our service and develop new features
• Send important service updates and notifications
• Ensure platform security and prevent fraud

4. Data Sharing with Third Parties (OpenAI)

Important Notice: We share your test response data with OpenAI Inc. to provide AI-powered evaluation services:

• What We Share: Your written essays are sent to OpenAI's GPT-4 model, and your speaking recordings are sent to OpenAI's Whisper model for transcription and analysis.
• Purpose: To generate personalized feedback, scoring, and suggestions for improvement.
• OpenAI's Policies: OpenAI has their own privacy policy and data usage terms. According to OpenAI's policies, they may use API inputs to improve their models unless you opt out. Please review OpenAI's Privacy Policy.
• Data Retention: We do not control how long OpenAI retains your data. Please refer to OpenAI's data retention policies.

5. Your Data Rights

You have the right to:

• Access your personal data stored in our system
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your test responses and performance data
• Withdraw consent for data processing (note: this may limit service functionality)

6. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

• Encryption of data in transit (HTTPS/SSL)
• Secure database storage with access controls
• Regular security audits and updates
• Session-based authentication with secure cookies

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. We automatically delete older test responses, keeping only your most recent 10 submissions per test type. You can request full account deletion at any time.

8. Cookies

We use essential cookies to maintain your login session and provide basic functionality. We use session cookies and CSRF tokens for security. We do not use third-party advertising or tracking cookies.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by email or through the platform. Continued use of the service after changes constitutes acceptance.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: [email protected]