Privacy Policy
Last updated: 2026-05-07
telcPrep B2 protects your personal data. This page explains what we collect, why, and how you can exercise your rights.
1. Data we collect
On signup: email address and a hashed password. During use: your exam answers, your audio recordings (sent to OpenAI for transcription, never stored on our servers), your scores and notifications. On payment: the proof screenshot, amount and method (D17 or Mandat Minute).
2. Why we process it
Your data is used only to: (a) run your account and exam sessions, (b) display progress and generate AI reports, (c) validate payments, (d) send service-related notifications. We never sell data to third parties.
3. Subprocessors
Hosting on Supabase (EU), AI models on OpenAI (United States — covered by EU standard DPAs). Audio recordings are sent to OpenAI for Whisper transcription and not retained beyond the session.
4. Your rights
Under Tunisian law 2004-63 and the EU GDPR, you may: access your data, correct it, request deletion, or export your history. Reach us via WhatsApp or email — we reply within 30 days at most.
5. Cookies
We only use essential cookies (auth session, theme preference, language). No advertising or third-party tracking cookies.
6. Retention
Account data is kept while your account is active, plus 12 months after deletion for tax compliance. Audio recordings are never retained.
7. Security
All traffic is TLS-encrypted. Passwords are bcrypt-hashed. User data access is enforced by Supabase Row-Level Security — every user only sees their own rows.
8. Contact
For any data-related question: send a WhatsApp message from your dashboard or email the address listed in the Terms.