Privacy Policy

1. Who we are

LevelPrep is operated by Ishvaron Strategy PTY LTD, an Australian company. We provide exam preparation materials and mock examinations at levelprep.org. For privacy enquiries, contact us at admin@ishvaronstrategy.com.au.

2. Information we collect

When you create an account: your name, email address and, if you add them, your phone number, country, exam level and exam date. When you use our Get Started questions: the exam and level you choose, what you want help with, and where you came from (such as the website or campaign that sent you). When you buy: Stripe processes your payment and we never see or store your card details; we keep a record of the purchase (product, amount, currency, date, Stripe's payment reference and receipt link). When you study: the questions you attempt, your answers and scores, your progress, notes and bookmarks, and your game scores and display name. If you claim Pass Protection: the result document you upload. Technical data: your IP address and browser details are recorded with each mock exam attempt, for exam integrity and security.

3. How we use your information

We use your information to run your account and the platform, process payments, send account emails (such as sign-in links, email confirmation and password resets), track your study progress, review Pass Protection claims, and detect and prevent fraud and abuse. We do not sell your personal information, and we do not use it for advertising.

4. Data storage and security

Your data is stored with Supabase (Tokyo region) and is encrypted at rest. All data is transmitted over HTTPS, and access to our database is restricted by row-level security policies. Payments are handled by Stripe, which is PCI DSS compliant. We keep your data while your account is open. Section 7 explains what happens when you delete your account.

5. Cookies and analytics

We use essential cookies to keep you signed in; the platform cannot work without them. Your cookie choice is remembered in your browser's local storage. With your consent, given by choosing "Accept" on our cookie banner, we also load two analytics tools: Google Analytics 4 (Google) and PostHog. They set their own cookies and record how the site is used, such as pages viewed, clicks, scrolling, and your device and browser. If you choose "Decline", neither loads. We do not link analytics data to your name or email. We also use Vercel Web Analytics, which counts page views without cookies and without identifying you, for every visitor. To change your choice, clear this site's data in your browser; the banner will ask again.

6. Third-party services

We use Stripe for payments (stripe.com/privacy), Supabase for our database and sign-in (supabase.com/privacy), Vercel for hosting (vercel.com/legal/privacy-policy), Resend to send some emails (resend.com/legal/privacy-policy), and VdoCipher to stream lecture videos (vdocipher.com/privacy-policy). If you accept analytics cookies, Google and PostHog also receive the usage data described in section 5. Each provider handles data under its own privacy policy.

7. Deleting your account

You can delete your account at any time from your profile. We permanently delete your login, your profile (name, email, phone, country and exam details), your study, practice and mock exam history, notes, bookmarks and game scores, and any results you uploaded for Pass Protection. We also remove your email from our lead and waitlist records, and delete your customer profile at Stripe. If a Pass Protection claim is being reviewed, you can delete your account once it is decided. We keep a record of each purchase for five years, linked only to the payment reference held by Stripe, because Australian tax law requires us to keep transaction records. Stripe keeps its own record of your payment under its legal obligations (see stripe.com/privacy). Analytics data is not linked to your name or email, and expires under each provider's retention settings.

8. Your rights (Australian Privacy Act)

Under the Australian Privacy Act 1988, you have the right to access the personal information we hold about you, ask us to correct it, ask us to delete your account and associated data, and complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Privacy Act. To exercise any of these rights, contact us at admin@ishvaronstrategy.com.au.

9. International users

Your information is processed in Australia, in Japan (where our database is hosted), and by our service providers in other countries, including the United States. We take reasonable steps to make sure it is handled securely wherever it is processed.

10. Children

LevelPrep is intended for adults preparing for professional examinations. We do not knowingly collect personal information from anyone under 18. If you believe we have collected such information, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will tell you about significant changes by email or with a notice on the platform. Your continued use of LevelPrep after changes are posted means you accept the updated policy.

12. Contact

For any privacy question or request, contact Ishvaron Strategy PTY LTD at admin@ishvaronstrategy.com.au.