1. Who we are
CasperReady.com ("CasperReady," "we," "us," or "our") operates casperready.com and the CasperReady practice platform (the "Service"). Our mailing address is 30 N Gould St Ste R, Sheridan, WY 82801, United States. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Service.
2. Information we collect
- Account and profile information: your name, display name, email address, authentication information, account creation date, plan, and any profile image you choose to upload. If you use Google sign-in, we receive the account details Google makes available for authentication, such as your email address and basic profile information.
- Practice information: your typed answers, simulator attempts, session history, words typed, time used, cut-off indicators, self-reviews, AI practice scores, competency feedback, and related progress information.
- Spoken-answer recordings and transcripts: recordings stay on your device unless you choose “Score this answer.” When you make that request, the selected recording is uploaded to private storage for transcription and scoring. The recording is deleted immediately after processing finishes, whether processing succeeds or fails. We retain the transcript for four weeks so you can review it, unless you delete it earlier from the review screen. The resulting practice score and written feedback remain with your practice record.
- Purchase information: plan purchased, amount, currency, transaction and checkout identifiers, payment status, refunds, and information needed to identify or follow up on an incomplete checkout. Stripe processes payment-card and wallet details; we do not store full card numbers.
- Usage and technical information: page views, interactions, referral and campaign information, browser and device information, IP address, service logs, and a first-party visitor identifier used for analytics and experiments.
- Communications: messages you send to support, email-delivery status, and your email preferences.
3. How and why we use information
We use personal information to:
- create and secure accounts, provide the simulator, save progress, and deliver purchased access;
- transcribe and score answers when you ask us to do so, and display practice feedback;
- process payments and refunds, prevent fraud, and maintain transaction records;
- send account, security, purchase, and service-related messages;
- send product updates where permitted, with an unsubscribe option in marketing messages;
- measure and improve the Service, understand conversion paths, and test site experiences;
- respond to requests, enforce our Terms, protect users, and comply with law.
Where applicable law requires a legal basis, we process information as necessary to perform our contract with you, based on your consent for optional recording uploads and marketing, for our legitimate interests in operating, securing, and improving the Service, and to meet legal obligations. You may withdraw consent at any time, without affecting prior processing.
4. AI transcription and practice scoring
When you submit an answer for scoring, its text—or an audio/video recording that must first be transcribed—is sent to our AI service provider. Automated systems generate a practice score and coaching feedback. This output may be incomplete or inaccurate and should be reviewed critically. It is not an official Casper score, quartile prediction, admissions decision, or substitute for human judgment. We do not use this processing to make decisions that produce legal or similarly significant effects about you.
5. Cookies, storage, and analytics
We use first-party cookies and browser storage to keep you signed in, preserve settings, store recordings locally, remember attribution, and operate analytics and experiments. A random first-party visitor identifier may remain in a cookie and local storage for up to one year. Session storage may remember events during a browser session. These technologies do not read unrelated files from your device. Blocking cookies or clearing browser storage may prevent sign-in, local recording review, or other parts of the Service from working correctly.
6. When we disclose information
We disclose personal information only as needed to operate the Service, complete a transaction, protect rights and safety, comply with law, or complete a business transaction. Our current service providers include:
- Lovable Cloud and Lovable AI for hosting, authentication, data storage, transcription, and AI scoring;
- Stripe for checkout, payment processing, fraud prevention, and refunds;
- Brevo for transactional and permitted marketing email;
- ZeroBounce for email-address validation;
- Google when you choose Google sign-in; and
- Cloudflare for domain, content delivery, traffic security, and abuse protection.
These providers process information under their own terms and privacy commitments. We may also disclose information to advisers, authorities, or other parties when reasonably necessary to comply with law, investigate abuse, protect the Service, or support a merger, financing, acquisition, or sale of assets. We do not sell personal information for money. We do not use personal information for cross-context behavioral advertising.
7. Retention
We retain account and practice information while your account is active and for as long as reasonably needed to provide the Service, resolve disputes, enforce agreements, and satisfy legal, tax, accounting, security, and fraud-prevention requirements. Spoken-answer recordings uploaded for scoring are deleted immediately after processing. Their transcripts are deleted after four weeks or earlier at your request through the review screen. Local recordings remain under your control in your browser until you remove them or clear browser storage. Transaction records may be retained as required by law. When information is no longer needed, we delete, anonymize, or securely isolate it.
8. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls and private storage for temporary recording uploads. No online service can guarantee absolute security. You are responsible for using a strong password and keeping your sign-in details confidential.
9. International transfers
CasperReady and its providers may process information in the United States, Canada, the European Economic Area, and other countries where privacy laws may differ from those where you live. Where required, we rely on recognized transfer safeguards, such as contractual protections, or another lawful transfer mechanism.
10. Your choices and privacy rights
Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information; restrict or object to certain processing; withdraw consent; or appeal a denied request. You may also unsubscribe from marketing email using the link in the message. Transactional and account-security messages may still be sent while your account remains active.
To exercise a privacy right or request account deletion, email [email protected]. We may ask you to verify your identity. Authorized agents may submit requests where permitted by law, subject to proof of authority. You may complain to your local privacy or data-protection regulator. We will not discriminate against you for exercising a privacy right.
11. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact us so we can investigate and delete it where appropriate.
12. Changes to this policy
We may update this Privacy Policy as the Service or legal requirements change. We will post the revised policy with a new effective date and, when appropriate, provide additional notice by email or within the Service.
13. Contact
Privacy questions and requests may be sent to [email protected] or mailed to CasperReady.com, 30 N Gould St Ste R, Sheridan, WY 82801, United States.