Privacy Policy

Last updated: 15 September 2026

1. Who controls your data

AssetronX, contactable at support@assetronx.com. The registered company name and address will appear here when the UAE entity's formation completes.

2. What we collect

You give us: your email address, your password (stored only as a hash, never readable by us), and anything you write to us.

The service records as you use it: which certifications you have access to and until when; sessions started; questions served, answered and flagged; whether answers were correct; timings; and rate-limit counters. Technical logs include IP address, browser and timestamps.

We do not collect payment details. Checkout is handled by the merchant of record named at checkout, who tells us only what you bought and when. Your card never reaches us.

Your email is shown inside the product. It is rendered as a watermark across question content, which means it appears in any screenshot you take. This is deliberate — see section 6 of the Terms.

3. Why, and on what basis

• Providing the service you bought — performing our contract with you
• Restricting access to what you paid for — performing our contract with you
• Watermarking and usage logging — our legitimate interest in protecting the content, and your consent under Terms section 6
• Detecting account sharing and bulk collection — our legitimate interest in preventing misuse
• Service emails about your access — performing our contract with you
• Marketing emails — your consent, withdrawable at any time
• Improving question quality using aggregate performance data — our legitimate interest, on aggregated data

4. Who else sees it

• Supabase — database and authentication (hosted in the EU, eu-west-1)
• Vercel — application hosting and delivery
• The merchant of record — payment processing; they are a controller in their own right for the transaction
• Namecheap Private Email — our mail provider, for messages you exchange with us

We do not sell your data and do not share it for anyone else's advertising.

5. How long we keep it

• Account and entitlements: while your account exists, then 12 months
• Session and answer history: while your account exists, so you can see your own progress
• Rate-limit and technical logs: 12 months
• Records needed for tax or accounting: as long as the law requires

6. Your rights

You can ask for a copy of your data, correction of anything wrong, deletion of your account and data, a machine-readable export, or restriction of processing. You can object to processing based on legitimate interests, and withdraw consent to marketing at any time. Write to support@assetronx.com and we will respond within 30 days.

Deleting your account ends access to anything you have bought, and no refund arises from that. You can complain to your local data protection authority.

7. International transfers

Data is stored in the EU. If you are outside the EU it will be transferred there, protected by the safeguards described here and by our providers' contractual commitments.

8. Cookies and local storage

We use what is needed to keep you signed in and to run examination sessions — strictly necessary, so no consent banner is required for them. There is no analytics or advertising tracking on the site today; if that changes, this page and a consent banner will say so first.

9. Children

AssetronX is for professionals preparing for certification and is not intended for anyone under 18.

10. Changes

We will post changes here and, if material, email you.