Privacy Policy

1. Introduction

CSTQ.ca ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

2. Information We Collect

Information you provide:

• Account information: When you sign in with Google or Apple, we receive your name, email address, and profile picture as provided by the authentication provider.
• Language preferences: Your selected display language and official test language.
• Payment information: Payment is processed by Stripe. We do not store your credit card number, CVV, or full payment details on our servers. We receive only a confirmation of payment status and a Stripe customer ID.

Information collected automatically:

• Usage data: Practice and mock exam results (scores, category breakdowns, timestamps) to provide your analytics dashboard.
• Cookies: We use essential cookies for authentication (session token) and language preferences. We do not use advertising or tracking cookies.
• Local storage: Some practice session data may be stored in your browser's local storage for performance purposes.

3. How We Use Your Information

We use your information to:

• Provide and maintain your account
• Process payments and manage your purchase
• Display your practice and exam analytics
• Remember your language preferences
• Communicate with you about your account or service updates
• Improve our service and fix technical issues

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services:

• Google Sign-In / Apple Sign-In: For authentication. Subject to Google's Privacy Policy and Apple's Privacy Policy.
• Stripe: For payment processing. Subject to Stripe's Privacy Policy.
• Cloudflare: For hosting and content delivery. Subject to Cloudflare's Privacy Policy.

5. Data Storage and Security

Your data is stored on Cloudflare's infrastructure. We use industry-standard security measures including encrypted connections (HTTPS), secure authentication tokens, and access controls. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account information and practice data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it.

7. Your Rights

Under PIPEDA and applicable privacy laws, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of your account and personal data.
• Withdraw consent: Withdraw your consent to our processing of your data at any time.

To exercise any of these rights, contact us at support@cstq.ca.

8. Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us immediately.

9. Changes to This Policy

We may update this policy from time to time. We will notify users of material changes by updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact us at:

Email: support@cstq.ca