This Privacy Policy explains how AURA EDUCACAO TECNOLOGIA LTDA, registered under CNPJ 63.854.028/0001-06 ("Invo Prep," "we," "us," or "our"), collects, uses, stores, shares, and protects personal data when you use https://invoprep.com and related services (the "Service").
Invo Prep is an educational platform for GMAT™ exam practice, adaptive exercises, AI-generated explanations, performance tracking, and related study tools.
By using the Service, you acknowledge this Privacy Policy.
If you have questions or requests about privacy, contact us at support@invoprep.com.
1. Personal Data We Collect
We collect only the data reasonably necessary to operate, improve, secure, and provide the Service.
1.1 Account Data
When you create an account, we may collect:
- name;
- email address;
- login method;
- authentication identifiers;
- account settings;
- optional profile photo, if you choose to upload one.
1.2 Authentication Data
Authentication may be handled through Supabase and may include technical information needed to create, verify, and maintain your login session.
If you sign in with Google or another third-party login method, we may receive basic account information from that provider, such as your name, email address, and authentication identifier, depending on your settings and the provider's policies.
1.3 Study and Usage Data
When you use the platform, we may collect data related to your learning activity, such as:
- questions shown to you;
- answers submitted;
- whether answers were correct or incorrect;
- time spent on questions;
- practice history;
- session activity;
- difficulty level and adaptive progress;
- performance metrics;
- AI tutor interactions;
- feature usage;
- technical logs related to platform performance and security.
This data is used to operate the adaptive practice experience, track progress, improve the Service, and maintain platform security.
1.4 Payment and Subscription Data
Payments are processed by Stripe or another payment provider we may use in the future.
We do not directly store your full credit card number or complete payment credentials.
We may receive and store limited subscription and billing-related information, such as:
- subscription status;
- plan type;
- renewal date;
- payment confirmation;
- invoice status;
- customer identifier from the payment provider;
- refund or cancellation status.
1.5 AI Tutor Inputs
If you use the AI tutor or other free-text AI features, we may process the questions, prompts, answers, and related content you submit.
You should not submit sensitive personal information, confidential information, financial information, health information, passwords, government identification numbers, or other highly private information to the AI tutor.
1.6 Technical Data
We may collect technical data necessary to operate and secure the Service, including:
- IP address;
- device and browser information;
- operating system;
- pages or features accessed;
- timestamps;
- error logs;
- security logs;
- cookie or session identifiers.
2. How We Use Personal Data
We use personal data to:
- create and manage user accounts;
- authenticate users;
- provide access to the Service;
- deliver adaptive practice questions;
- track progress and performance;
- provide AI-generated explanations and AI tutor features;
- process subscriptions, cancellations, and refunds;
- communicate important account, billing, security, or service updates;
- improve the Service;
- monitor performance and fix bugs;
- prevent fraud, abuse, scraping, unauthorized access, and account sharing;
- comply with legal, tax, accounting, regulatory, and contractual obligations;
- enforce our Terms of Service.
We do not sell your personal data.
We do not use your personal data for third-party advertising.
3. Legal Bases for Processing
Where applicable under Brazilian data protection law, including the LGPD, we process personal data based on one or more legal bases, including:
- performance of a contract, to provide the Service you requested;
- legitimate interests, such as improving, securing, and preventing abuse of the Service;
- compliance with legal or regulatory obligations;
- consent, where required for specific optional features or communications.
4. AI Providers and Third-Party Processing
We may use third-party artificial intelligence providers, including OpenAI, Anthropic, or other providers, to support features such as AI-generated explanations, AI tutor responses, question generation, feedback, and study assistance.
When you use AI features, your prompts, questions, answers, or related context may be processed by these providers as necessary to deliver the feature.
We do not intend to use your personal data to sell advertising or sell user profiles. We also do not sell your personal data to AI providers.
Because AI features may involve third-party processing, you should avoid submitting sensitive, confidential, or highly personal information into AI input fields.
5. Service Providers
We may share personal data with trusted service providers only as necessary to operate, secure, and provide the Service.
These providers may include:
- Supabase, for authentication, database, and infrastructure services;
- Stripe, for payment and subscription processing;
- OpenAI, Anthropic, or other AI providers, for AI-related features;
- Vercel or other hosting/deployment providers;
- email service providers, for transactional messages;
- analytics providers, if we add analytics in the future;
- legal, accounting, tax, or compliance advisors where necessary.
These service providers may process data in accordance with their own terms, privacy policies, and data processing obligations.
7. Marketing Communications
We currently do not intend to send marketing emails.
We may send transactional or service-related emails, such as:
- account confirmation;
- password reset;
- payment confirmation;
- subscription updates;
- refund or cancellation notices;
- important legal, security, or service updates.
If we later send marketing emails, we will provide an appropriate way to opt out.
8. Data Storage and International Transfers
Our primary database is currently hosted in São Paulo, Brazil. However, we may change hosting regions or use service providers that process or store data in other countries.
Some of our service providers may operate internationally. As a result, your personal data may be processed or stored in countries other than your country of residence.
When we transfer or allow processing of personal data internationally, we take reasonable steps to use providers and arrangements designed to protect personal data in accordance with applicable law.
9. Data Retention
We retain personal data for as long as necessary to provide the Service, maintain your account, comply with legal obligations, resolve disputes, prevent abuse, enforce our Terms, and maintain business records.
If you request account deletion, we will delete or anonymize personal data that is no longer necessary, unless we need to retain certain information for legitimate reasons, such as:
- billing and tax records;
- legal compliance;
- fraud prevention;
- dispute resolution;
- security logs;
- enforcement of our Terms;
- backup systems for a limited period.
Study activity and performance data may be deleted, anonymized, or retained in aggregated form where it no longer identifies you.
10. Your Privacy Rights
Depending on applicable law, including the LGPD, you may have rights regarding your personal data, such as the right to:
- confirm whether we process your personal data;
- access your personal data;
- correct incomplete, inaccurate, or outdated data;
- request anonymization, blocking, or deletion of unnecessary or excessive data;
- request data portability, where applicable;
- request information about sharing of your data;
- withdraw consent where processing is based on consent;
- object to certain processing activities, where applicable;
- request review of certain automated decisions, where applicable;
- request deletion of personal data processed with your consent, subject to legal retention requirements.
To exercise your rights, contact us at support@invoprep.com.
We may need to verify your identity before responding to a request.
11. Account Deletion
You may request deletion of your account by contacting support@invoprep.com.
After receiving a deletion request, we will take reasonable steps to delete or anonymize personal data associated with your account, subject to legal, billing, tax, fraud prevention, security, and legitimate business retention requirements.
Deleting your account may permanently remove your study history, progress, settings, and access to the Service.
12. Security
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
However, no system is completely secure. We cannot guarantee absolute security of your data.
You are responsible for keeping your login credentials secure and for notifying us if you suspect unauthorized access to your account.
13. Children and Minors
The Service is intended for users who are at least 18 years old.
We do not knowingly allow users under 18 to create accounts or use the Service. If we become aware that a person under 18 has created an account, we may delete or suspend the account and associated personal data, subject to legal requirements.
14. Third-Party Links
The Service may contain links to third-party websites, products, or services. We are not responsible for the privacy practices, content, or policies of third parties.
You should review the privacy policies of any third-party services you use.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When we make material changes, we will take reasonable steps to notify users, such as by updating the effective date, posting a notice on the website, or sending an email.
Your continued use of the Service after the updated Privacy Policy becomes effective means you acknowledge the updated policy.
16. Contact
For privacy questions, requests, or concerns, contact us at:
CNPJ: 63.854.028/0001-06
Website: https://invoprep.com
Email: support@invoprep.com