Privacy Policy

1. Introduction

Execemy Platform ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us:

• Account information: Name, email address, username
• Profile information: Full name, bio, avatar image
• User-generated content: Content you create on the platform (simulation inputs, learning progress)
• Payment information: Processed securely by Paddle (our payment processor). We do not store payment card details.

2.2 Automatically Collected Information

We automatically collect certain information:

• Usage analytics: Pages visited, features used, time spent, and engagement patterns
• Device information: IP address, browser type, operating system
• Cookies and tracking technologies: See our Cookie Policy for details
• Learning progress: Lesson completion status, simulation results, competency scores

3. Lawful Basis for Processing

We process your personal information based on the following lawful bases:

• Contractual necessity: To provide the Service you have subscribed to
• Legitimate interest: To improve our platform, analyze usage patterns, and enhance user experience
• Consent: For marketing analytics cookies on our marketing pages (you can withdraw consent at any time)
• Legal obligation: To comply with applicable laws and regulations

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process your account registration and manage your subscription
• Send you transactional emails and notifications (e.g., welcome emails, account updates)
• Personalize your learning experience and recommend relevant content
• Analyze usage patterns to improve our platform functionality and user experience
• Generate competency assessments and simulation debriefs
• Detect and prevent fraud, abuse, or security issues
• Comply with legal obligations and respond to legal requests

5. Data Processors (Sub-processors)

We use the following third-party services that process your personal information:

• Supabase: Database hosting, user authentication, and file storage
• Vercel: Web hosting and performance analytics
• Paddle: Payment processing and subscription management
• PostHog: Product analytics (used with consent on marketing pages only)
• Replicate / OpenAI / Google (Vertex AI): AI model providers for generating simulation debriefs and content
• Resend: Transactional email delivery
• Sentry: Error tracking and monitoring

All data processors are contractually required to protect your information and use it only for the purposes specified. They are prohibited from using your personal information for their own purposes.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your information:

• With service providers (data processors) listed in Section 5 who assist in operating our Service
• When required by law, legal process, or to protect our rights and safety
• In connection with a business transfer, merger, or acquisition (with notice to users)
• With your explicit consent or at your direction

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

8. Your Rights (Data Subject Access Requests)

Depending on your location (GDPR, CCPA/CPRA, etc.), you may have the following rights:

• Right of Access: Request a copy of all personal information we hold about you
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your account and all associated data
• Right to Object: Object to processing based on legitimate interests
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Withdraw Consent: Withdraw consent for analytics cookies at any time

You can exercise most of these rights directly through your account settings at /profile/settings/privacy. For other requests, please contact us at privacy@execemy.com.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to track activity and store information. Essential cookies are required for the Service to function. Analytics cookies on marketing pages require your consent. You can control cookie preferences through the cookie consent banner or your browser settings. See our Cookie Policy for more details.

10. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes described in this policy:

• Account data: Retained while your account is active. Deleted upon account deletion request.
• Transaction records: Retained for 7 years for tax and legal compliance (payment data via Paddle).
• Usage analytics: Aggregated and anonymized after 25 months.
• Legal obligations: We may retain certain information longer if required by law or for legitimate business purposes.

11. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence (e.g., Supabase servers may be located in the United States). We ensure appropriate safeguards are in place through Standard Contractual Clauses (SCCs) and compliance with GDPR and other applicable data protection laws to protect your information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page, updating the "Last updated" date, and, where appropriate, notifying you via email or through the Service.

14. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@execemy.com