Privacy Policy
Effective 10 February 2026
Our privacy commitment
- We never sell your personal data.
- We only collect what is needed to deliver and improve the Service.
- You can request deletion of your data at any time.
- All data is encrypted in transit and at rest.
1. Introduction
This Privacy Policy explains how Virtouzo ("we", "our", "us") collects, uses, stores, and protects your personal information when you use virtouzo.com and any associated services (the "Service"). By using the Service you consent to the practices described here.
2. Information We Collect
We collect the following categories of information:
2.1 Account Information
When you register we collect your email address, display name, and authentication credentials (managed by Clerk). If you sign in via a social provider (e.g. Google) we receive your name and email from that provider.
2.2 Educational Data
As you use the Service we collect your practice answers, time spent on questions, skill progression states, roadmap selections, and session history. This data powers our adaptive learning engine.
2.3 Usage & Technical Data
We automatically collect device type, browser type, operating system, IP address, pages visited, and interaction timestamps. This data is gathered via server logs and standard web analytics.
2.4 Payment Information
Payments are processed by Stripe. We do not store your credit card number or full payment details. We receive only a Stripe customer ID and subscription status to manage your plan.
3. How We Use Your Information
We use collected information to:
- Generate personalised study roadmaps and practice questions.
- Provide AI-powered feedback and answer validation.
- Track your learning progress and skill mastery.
- Process payments and manage your subscription.
- Improve the Service through aggregated usage analysis.
- Send important account notifications (e.g. billing, security).
- Maintain the security and integrity of the platform.
4. Data Sharing
We do not sell your personal information. We share data only with the following service providers who help us operate the platform:
- Clerk — authentication and user management.
- MongoDB Atlas — database hosting.
- Stripe — payment processing.
- Vercel — application hosting and deployment.
- OpenAI / Anthropic — AI question generation and feedback (answers are processed without personally identifiable information).
We may also share aggregated, anonymised data for research or analytical purposes. Individual learning data is never shared without your explicit consent.
5. Data Retention
We retain your account and educational data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g. fraud prevention).
6. Data Security
We implement industry-standard security measures including encryption in transit (TLS/HTTPS), encrypted database storage, and access controls. While no system is 100% secure, we take reasonable steps to protect your information from unauthorised access, alteration, or disclosure.
7. Cookies & Tracking
We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics cookies, if used, collect only aggregated, non-identifiable data.
8. AI Processing
When you submit answers or request feedback, your responses are sent to AI services for processing. These submissions are anonymised — no personally identifiable information is included. AI providers do not use your data to train their models when accessed via API.
9. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take steps to delete it promptly.
10. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Export your data in a portable format.
- Withdraw consent for data processing.
To exercise any of these rights, contact us at hello@virtouzo.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Continued use of the Service after changes constitutes acceptance.
12. Contact
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at hello@virtouzo.com.
If you are in Australia, you may also contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.