Privacy Policy

1. Information we collect

We collect information needed to run the website, authenticate accounts, score practice work, manage access, and protect the service.

• Account information, such as your email address, Clerk account identifiers, profile name, and login status.
• Learning data, such as mock exam attempts, answers, timing, scores, AI usage, mistakes, favorites, checkpoints, and dashboard history.
• Writing and speaking submissions, including text responses, uploaded or recorded audio, and related scoring feedback.
• Membership and access data, such as subscription status, invitation code usage, referral code attribution, reward activity, and access expiration dates.
• Technical and security data, such as IP address, browser, device-related identifiers, request logs, and signals used to detect abuse, repeated trials, fraud, or payment risk.
• Billing metadata from Stripe, such as Stripe customer IDs, subscription IDs, invoice status, and payment risk signals. We do not store your full card number on CEL PIP servers.

2. How we use information

• To create and secure accounts and keep your learning history tied to the correct account.
• To deliver mock exams, learning tools, AI scoring, progress dashboards, and account management features.
• To activate, extend, suspend, or revoke access based on subscriptions, invitation codes, referrals, refunds, disputes, or security review.
• To process referrals, enforce one-referrer-per-account rules, prevent self-referrals, cap rewards, and review suspicious activity.
• To improve site stability, diagnose bugs, measure usage, and protect the service from abuse.
• To comply with legal obligations and respond to valid law-enforcement or regulatory requests where required.

3. AI scoring and uploaded responses

CEL PIP provides AI-assisted feedback for writing and speaking tasks. To generate scores and feedback, we may process your written answers, speaking audio, transcripts, prompts, and related metadata through AI systems operated by CEL PIP or its configured service providers.

• A configured large-language-model provider, which may include NVIDIA NIM and an Antigravity-compatible gateway using a Gemini Flash model, may be used to analyze writing responses, speaking transcripts, rubric alignment, and feedback generation. Provider routing is configuration-dependent and may change as reliability and privacy controls are reviewed.
• Microsoft Azure Speech, including primary and backup Azure Speech accounts or regions, may be used for speech-to-text, pronunciation analysis, fluency analysis, and related acoustic scoring for speaking tasks.
• AssemblyAI or a comparable transcription provider may be used as a fallback transcription service for speaking recordings when configured.
• For reliability, the same scoring request may be retried or routed to a backup configured AI or speech provider if a primary provider is unavailable, times out, or returns an error.
• We may run model-consensus calibration using the same rubric on redacted writing answers or speaking transcripts and limited timing, transcript-confidence, and acoustic features. Raw speaking audio is not sent to a language model for this calibration. Consensus is used as a monitoring and pseudo-label signal, not as human-rater ground truth, an official CELPIP score, or a claim that a human examiner reviewed your work.
• Signed-in users may give feedback such as accurate, too high, too low, or feedback issue. Feedback is used for monitoring and sampling only and is not treated as ground truth. A separate versioned disclosure/consent record may record whether you opted into identifiable calibration sampling. Existing records that predate this choice are labeled internally as controller legacy authorization rather than as a user click.

4. Cookies, local storage, and browser-side data

We use browser storage and similar client-side mechanisms to support sign-in state, language preferences, referral code capture, exam progress recovery, and other session features. Some practice data may be cached temporarily in the browser to keep the experience responsive and resumable.

5. How information is shared

We do not sell your personal information. We may share limited information with service providers that help us operate CEL PIP.

• Clerk, for authentication and session management.
• Stripe, for subscription checkout, billing, customer portal, and payment-risk handling.
• Cloudflare and comparable CDN or security providers, for website delivery, caching, bot mitigation, and request protection.
• Hosting and cloud infrastructure providers, including the compute and storage services that run the application and database.
• Resend or comparable email providers, for verification, password reset, and operational email delivery.
• Configured AI and transcription providers, only as needed to score or analyze practice content and return feedback to you.
• Authorities or counterparties where disclosure is required by law, legal process, fraud review, dispute handling, or platform protection.

6. Retention

We keep information only for as long as it is reasonably needed for product operation, security, billing, or legal compliance.

• Account profile, progress, attempt history, AI usage, and membership status are generally kept while your account remains active so you can continue the same learning history.
• Writing submissions, speaking transcripts, AI outputs, and related attempt data are generally retained with the associated attempt record unless deleted, de-identified, or shortened under our retention practices.
• Identifiable calibration snapshots, provider review metadata, and scoring feedback are retained only for the calibration and monitoring loop. You may withdraw from future calibration sampling and request deletion of identifiable calibration snapshots; a minimal disclosure or audit record may remain to document the request and protect the service.
• Billing, referral, audit, fraud-review, dispute, and refund records may be retained longer after cancellation or account closure where needed for accounting, abuse prevention, or legal obligations.
• Operational logs and device or risk signals may be retained for a limited review period and extended when an account or payment enters security, refund, or dispute review.

7. Deletion and privacy requests

You may request account or privacy support by emailing [email protected]. After verifying the request, we will delete or de-identify information we are not required to keep, within a reasonable period. We may retain limited billing, fraud-prevention, security, and legal compliance records even after deletion requests are completed.

8. Your choices

• You may manage your subscription through the account area and Stripe customer portal where available.
• You may stop using the website at any time, but certain learning, billing, and fraud-prevention records may still be retained.
• You may withdraw from future identifiable calibration sampling through an available account control or by contacting [email protected]. Withdrawal deletes identifiable calibration snapshots, reviews, and feedback associated with the account where they are not required for security or legal purposes.
• If you believe your account data is inaccurate or you have a privacy request, contact [email protected].

9. Children

CEL PIP is intended for learners and adult users preparing for language tests. Do not use the service if you are not allowed to do so under the laws that apply to you or if you cannot validly consent where consent is required.

10. Updates to this policy

We may update this Privacy Policy when the product, billing flows, security practices, or legal requirements change. Material updates may be announced by email to your account email address, by a prominent notice inside your account, or by notice at this URL. The version posted at this URL is the current version.