Privacy Policy

1. Introduction

2. Information We Collect

Personal Information

• Name and email address when you create an account
• Language preferences and test preparation goals
• Payment information (processed securely through Stripe)
• Profile information you choose to provide

Usage Information

• Practice session data and performance metrics
• Audio recordings for practice sessions (stored temporarily)
• Study progress and learning analytics
• Device information and browser type
• IP address and location data

Cookies and Tracking

We use cookies and similar tracking technologies to improve your experience, analyze usage patterns, and personalize content.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our NAATI CCL preparation services
• Process your practice sessions and provide AI-powered feedback
• Track your learning progress and provide personalized recommendations
• Process payments and manage subscriptions
• Send important updates about your account and our services
• Improve our platform and develop new features
• Provide customer support
• Comply with legal obligations

4. AI and Audio Processing

When you practice with PassNaati:

• Your audio recordings are stored in private cloud storage (Cloudflare R2) so you can replay them; only you can access them
• Speech-to-text transcription is performed by Groq (Whisper models) and Google (Gemini); OpenAI is used as a fallback if those are unavailable
• Scoring and feedback are generated by AI models from Groq and Google (Gemini), with OpenAI and Anthropic used as fallbacks
• Recordings, transcriptions and scores are retained for your progress tracking until you delete them or your account; recordings in an unsaved draft are deleted when the draft is discarded or expires

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services that help us operate our platform (Stripe for payments; Groq, Google, OpenAI and Anthropic for AI transcription and scoring; Cloudflare for recording storage; Neon for our database; Vercel for hosting; Resend for email; Sentry for error monitoring; Google Analytics for site analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Consent: With your explicit consent

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit and at rest
• Secure authentication and session management
• Regular security audits and updates
• Limited access to personal information on a need-to-know basis
• Secure cloud infrastructure with Digital Ocean

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal information
• Correction: Update or correct your information
• Deletion: Request deletion of your account and associated data
• Portability: Receive your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Restrict Processing: Limit how we use your information

To exercise these rights, please contact us at privacy@passnaati.com

8. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account information: Until you delete your account
• Practice session data (transcriptions, scores, progress): Until you delete your account
• Audio recordings: Until you delete your account; unsaved draft recordings when the draft is discarded or expires
• Payment records: As required by financial regulations (typically 7 years)

9. International Data Transfers

Your information may be transferred to and processed in countries other than Australia. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Children's Privacy

PassNaati is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us.

11. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

13. Privacy Compliance

PassNaati, operated by Tatwam Ventures, complies with applicable privacy laws and international privacy standards to protect users worldwide. For more information about our parent company, visit tatwam.com.