1. Who we are
AcePass is the brand under which this independently operated exam-preparation service is offered. For personal information processed to operate the website and learning account, AcePass is the responsible service provider. Contact us at [email protected].
Paddle separately processes checkout, payment, tax, fraud-prevention, and buyer-support information as the authorized reseller and seller of record. See Paddle’s Privacy Notice.
2. Information we collect
- Account information: name, email address, password hash, role, and account dates.
- Learning activity: answers, scores, attempts, progress, mistakes, favorites, selected language, and completion history.
- Purchase and access information: Paddle transaction identifier, purchased exam, amount, currency, status, and access expiration. We do not store complete card details.
- Technical information: IP address, device and browser information, request logs, security events, and diagnostic information produced when the service is used.
- Communications: messages and information you send to customer support.
3. How we use information
- create and authenticate accounts;
- provide free and paid practice, save progress, and display results;
- confirm purchases and activate or restore access;
- respond to support and refund requests;
- protect accounts, prevent fraud, and enforce our terms;
- diagnose errors, maintain the service, and improve usability and content;
- comply with legal, accounting, tax, and regulatory obligations.
Depending on your jurisdiction, these activities rely on performance of our contract with you, legitimate interests in operating and protecting the service, compliance with law, and consent where consent is required.
4. Cookies and local storage
AcePass uses essential session technologies to keep you signed in and protect your account. We also use browser storage to remember functional choices such as language and light or dark appearance. These are used to provide features you request rather than for cross-site advertising. Your browser can delete or block storage, but account login and saved preferences may stop working.
5. When information is shared
We share information only as reasonably necessary with:
- Paddle: to process payments, taxes, fraud checks, receipts, buyer support, and refunds;
- hosting, database, authentication, email, security, and infrastructure providers: to operate and protect AcePass;
- professional advisers and authorities: when needed to comply with law, protect rights and users, or respond to valid legal requests;
- a successor operator: if the service or its assets are reorganized, sold, or transferred, subject to appropriate safeguards.
We do not sell personal information for money and do not use account or practice data for targeted advertising across unrelated services.
6. International processing
Service providers may process information in countries other than your own. Where required, we use contractual or other recognized safeguards for international transfers. Paddle’s processing and transfer practices are described in its own privacy notice.
7. Retention
We retain account and learning information while your account is active and for a reasonable period afterward to provide history, resolve disputes, secure the service, and meet legal obligations. Purchase records may be retained longer where required for tax, accounting, fraud-prevention, or transaction compliance. Support communications are retained only as long as reasonably necessary for those purposes. Information is deleted or de-identified when it is no longer needed, unless law requires retention.
8. Your privacy choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection, and to withdraw consent where processing relies on consent. You may also have the right to appeal a decision or complain to a privacy regulator.
Send a request from the email associated with your account to [email protected]. We may need to verify your identity. We will respond within the period required by applicable law. Deleting an account does not require Paddle to delete transaction records that Paddle must retain as seller of record; requests about Paddle data should be directed to Paddle.
9. Security
We use reasonable technical and organizational measures designed to protect personal information, including access controls, password hashing, encrypted network connections, and restricted administrative access. No online service can guarantee absolute security. Use a unique password and notify us if you believe your account has been compromised.
10. Children
AcePass is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 provided information, contact us so we can review and delete it where required.
11. Changes and contact
We may update this policy when our practices, providers, or legal obligations change. We will post the revised policy with a new updated date and provide additional notice where required. Questions and privacy requests may be sent to [email protected].