Privacy Policy

The data controller is:

For any request relating to your personal data: privacy@wandersensei.com

We collect the following categories of data:

• Account: email address, hashed password, first name (optional), selected track, creation date.
• Authentication: Google OAuth identifiers if you sign in with Google.
• Payment: amount, date, transaction ID, last digits of the card (full bank details are never stored by CAPIA.AI; they are processed solely by Stripe).
• Service usage: questions attempted, scores, progress, estimated level.
• Technical data: truncated IP address, device type, browser, locale.
• Communications: content of emails and messages you send us.

• Active account: for the entire duration of use, then three (3) years from the last connection.
• Billing data: ten (10) years from invoicing (accounting obligation).
• Payment data: retained by Stripe according to its own rules (generally 13 months for transaction records).
• Technical logs: twelve (12) months maximum.
• Newsletter: until consent is withdrawn, then three (3) years for evidentiary purposes.

Your data may be communicated to our processors, strictly to the extent necessary for their tasks:

Some processors may process your data outside the European Economic Area (notably Vercel, Firebase, Resend). Such transfers are governed by the Standard Contractual Clauses adopted by the European Commission (décision 2021/914) or by any other appropriate safeguard provided for by the GDPR.

In accordance with articles 15 à 22 of the GDPR, you have the following rights:

• right of access to your data;
• right of rectification;
• right to erasure ("right to be forgotten");
• right to restriction of processing;
• right to data portability;
• right to object to processing based on legitimate interest;
• right to withdraw your consent at any time where processing is based on it;
• right to set instructions regarding the fate of your data after your death.

To exercise these rights, write to us at privacy@wandersensei.com specifying your request. We will reply within thirty (30) days. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

CAPIA.AI implements appropriate technical and organisational measures to protect your data against any loss, alteration or unauthorised access: encryption in transit (TLS), encryption at rest for the database, password hashing, strictly limited access to authorised personnel, regular backups.

The site uses a limited number of cookies and trackers strictly necessary for the operation of the Service as well as, subject to your consent, audience measurement tools. For more details and to change your choices at any time, see our Cookies page.

The service is intended for natural persons of legal age. We do not knowingly collect data concerning minors under 15 years of age.

This policy may be updated. The date of last update appears at the top of the page. In the event of a substantial modification, you will be informed by email or by notification within the Service.