Privacy Policy

1. Introduction

Welcome to Oracle Prep ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we access, collect, use, store, and share your data, particularly concerning your Google account when you use Google OAuth to sign in or sign up.

2. Data Accessed

When you choose to authenticate with Oracle Prep using your Google account (via Google OAuth), our application explicitly requests and accesses the following Google user data:

• Primary Email Address: To uniquely identify you and communicate important account updates.
• Personal Info (Name & Profile Picture): To personalize your dashboard and create your user profile on our platform.

Note: We only request the minimum required scopes (`openid`, `profile`, `email`) necessary for authentication.

3. Data Usage

We use the Google user data we access strictly for the following purposes:

• Authentication & Authorization: To verify your identity and allow you to log in securely without needing a separate password.
• Account Creation: To automatically populate your Oracle Prep profile with your name and profile picture.
• Communication: To send you essential service-related notices, such as subscription updates or password reset links (if applicable).

We do NOT use your Google data for targeted advertising, nor do we use it to train generalized AI models.

4. Data Sharing

We do not sell, rent, or trade your Google user data to third parties.

Your data is only shared with trusted third-party service providers acting on our behalf (such as Supabase for database hosting and secure authentication infrastructure) solely for the purpose of operating the Oracle Prep service. These providers are bound by strict data processing agreements and are not permitted to use your data for their own purposes.

5. Data Storage & Protection

We employ industry-standard security measures to protect your data:

• Secure Infrastructure: Your data is stored securely in our Supabase-hosted PostgreSQL databases, which utilize enterprise-grade encryption at rest and in transit.
• Access Controls: Row Level Security (RLS) is strictly enforced at the database level, ensuring that only you (and authorized backend systems) can access your personal data.
• Tokens: We do not store your Google password. We only store secure, short-lived authentication tokens managed by Supabase Auth.

6. Data Retention & Deletion

Retention: We retain your Google user data (email, name, profile picture) only for as long as you maintain an active account with Oracle Prep.

Deletion Process: You have the right to request the complete deletion of your data at any time. To do so:

1. Send an email to support@oracleprep.io with the subject line "Account Deletion Request" from the email address associated with your account.
2. Upon verification, we will permanently delete your account, including all profile data, practice history, and authentication records, within 7 business days.