Legal
Privacy policy
Last updated 23 August 2026
This is a plain-language summary of what we collect and why. It should be reviewed against the New Zealand Privacy Act 2020, and the equivalent legislation in each market we enter, by a qualified lawyer before launch.
What we collect
- Your practice data. Which questions you attempted, what you chose, whether it was right, how long it took, and any confidence rating you gave. This is the product: without it there is no readiness score, no weakness analysis and no plan.
- Your results. Diagnostic and mock results, and the readiness score derived from them.
- Your account. Email address and display name, if you create one.
- Payments. Handled by Stripe. We store the fact of a purchase and what it granted. We never see or store your card details.
- AI Tutor conversations. The question, your intent, what you asked and what the tutor answered: retained so we can audit whether the tutor stayed grounded in our own content.
Anonymous use
You can take a diagnostic and see your readiness score without an account. We set a session cookie so your result survives the page you are on. If you later create an account, that work carries over rather than being discarded.
Analytics
We use Google Analytics to see how many people reach the site, which pages they land on and where they came from. It sets its own cookies and reports to Google. We use it to understand the site as a whole, not to identify you: it is never joined to your account, your results or your practice history. Browser-level controls, and Google's own opt-out browser add-on, both stop it.
What we do not do
- We do not sell your data.
- We do not share your results with any employer, recruiter, assessment provider or educational institution.
- We do not use your practice data to advertise to you elsewhere.
How we use it
To run the product: choosing your next questions, building your plan, calculating your readiness. and, in aggregate and de-identified form, to find questions with unusually high error rates so we can review and fix them.
Retention
We keep your practice history while your account is open, because progress over time is the point. You can delete your account at any time, which deletes your personal data and results.
Your rights
You can request a copy of your data, ask us to correct it, or ask us to delete it. Contact privacy@asessly.com.
Where your data lives
Asessly runs on Supabase (Postgres) and Vercel. Site analytics are processed by Google. AI Tutor requests are processed by our model provider. We do not send your name or email address in a tutoring request, the tutor receives the question and your answer, nothing identifying.