Privacy Policy
Last updated: April 6, 2026
Avec Vitesse (“we”, “us”, “our”) respects your privacy. This policy describes what personal information we collect when you use our TCF Canada preparation platform at avecvitesse.ca, why we collect it, how we use it, who we share it with, and your rights as a user.
Information We Collect
We collect the following categories of information: Account and identity: your name and email address when you register; a hashed version of your password if you sign up with email and password; your Google display name and email address if you register or sign in with Google. Profile and goals: your target CLB level and planned exam date, which you provide voluntarily in your profile settings. Billing and subscription: your Stripe customer ID, current subscription plan, subscription status, remaining credit balances (oral practice, written practice, mock exam), and related timestamps. Trial usage: trial start and end dates, and the number of trial sessions and writing sets you have used. Exam and practice data: your exam scores, CLB equivalent levels, AI-generated feedback text, and written answer transcripts. Oral session history including examiner selection and booking timestamps. Audio recorded during live oral practice sessions is streamed to our voice AI provider (ElevenLabs) to deliver the session and is not retained after the session ends. Technical and analytics data: IP address, browser type, device type, and feature-usage events collected by PostHog — only when you have accepted analytics cookies.
Google Sign-In
When you choose to sign in or register with Google, Google provides us with your email address and display name only. We use this information to create or identify your Avec Vitesse account and to link it to your authentication record. We do not receive your Google contacts, calendar, Drive files, search history, or any other Google data beyond your email address and display name. This information is not used for advertising, is not sold, and is not shared with any party other than the subprocessors listed in the Third-Party Subprocessors section below, solely to operate the Service. You may alternatively register and sign in using your email address and a password.
How We Use Your Information
We use the information we collect for the following purposes: to authenticate you and maintain your signed-in session; to deliver oral practice, written practice, comprehension exercises, and mock exam features; to process your payments and manage your subscription and credit balances; to limit request rates and prevent abuse; to send transactional emails related to your account; to understand how the platform is used in aggregate and improve it over time (via PostHog analytics, only when you have accepted analytics cookies); and to comply with applicable law and respond to valid legal requests. We do not sell your personal information. We do not use your information for advertising or for training third-party AI models.
Cookies and Local Storage
We use a session cookie, analytics cookies (opt-in only), and a localStorage key. The session cookie is essential — it keeps you signed in. Analytics cookies are set by PostHog only if you click “Accept Cookies” in the consent banner; if you click “Essential Only”, no analytics cookies are set and no usage events are captured. Your consent choice is stored in a localStorage key called cookie_consent so the banner does not reappear on subsequent visits. For a full table of what we set, see our Cookie Policy at avecvitesse.ca/cookies.
Third-Party Subprocessors
We rely on the following third-party providers to operate the platform. Each processes personal data only as necessary for its stated role and operates under its own privacy policy and, where required, a data processing agreement with us: • Supabase — database, user authentication, and row-level security. Stores account, exam, and booking data. • Vercel — hosting and serverless edge functions. Handles all web traffic. • Stripe — payment processing and subscription management. Processes billing and payment information. • Anthropic — AI model (Claude) used to grade written responses and generate feedback. Receives answer text. • ElevenLabs — voice AI used to power live oral practice sessions. Receives audio during active sessions. • PostHog — product analytics. Receives feature-usage events when you have accepted analytics cookies. • Upstash — distributed rate limiting via Redis. Receives request metadata to enforce usage limits. • Sanity — headless CMS used to manage practice content. • Resend — transactional email delivery.
Data Retention
Account records are retained while your account is active and for a reasonable period after deletion to address any outstanding support or legal matters. Stripe billing records are retained as required by Canadian tax law, typically seven years. Audio recordings from oral sessions are not stored after the session ends — they are streamed to ElevenLabs for session delivery only. AI-generated feedback, written transcripts, and exam scores are retained while your account is active and accessible from your dashboard; they are deleted when you delete your account or make a verified erasure request. PostHog analytics data is subject to PostHog's own data retention settings.
Your Privacy Rights
Depending on where you are located, you may have rights regarding your personal information: In British Columbia, the Personal Information Protection Act (PIPA, SBC 2003) gives you the right to access personal information we hold about you, request corrections to inaccurate information, and withdraw consent for non-essential processing. In other Canadian provinces and territories, the federal Personal Information Protection and Electronic Documents Act (PIPEDA) or a substantially similar provincial law applies and provides comparable rights. If you are located in the European Economic Area or the United Kingdom, the GDPR or UK GDPR applies and gives you rights to access, rectification, erasure, restriction, portability, and objection. If you are a California resident, the CCPA gives you the right to know what personal information we collect, request deletion, and opt out of the sale of personal information (we do not sell personal information). To exercise any of these rights, contact us at drue@avecvitesse.ca. We will respond within 30 days. Some information may be retained after a deletion request where required by law — for example, Stripe billing records retained for tax compliance.
International Data Transfers
Our providers store and process data in Canada, the United States (Vercel, Stripe, Anthropic, ElevenLabs, PostHog, Upstash), and the European Union (Sanity). When personal data is transferred outside Canada, we rely on contractual safeguards — such as standard contractual clauses — and, where applicable, adequacy determinations to ensure your information is protected to a standard comparable to applicable Canadian privacy law.
Security
We protect your data using TLS encryption for all data in transit, encrypted-at-rest storage via Supabase and Postgres, httpOnly and Secure flags on session cookies (which cannot be read by client-side JavaScript), row-level security policies in Supabase, and access controls on all production systems. No internet service is completely secure. Please use a strong, unique password for your Avec Vitesse account and notify us immediately at drue@avecvitesse.ca if you suspect unauthorised access.
Children
The Service is not directed at persons under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor's information has been collected without verified parental consent, we will take steps to delete it promptly.
Changes to This Policy
We may update this policy to reflect new features, changes to our subprocessors, or evolving legal requirements. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will notify you by email to the address associated with your account. Continued use of the Service after any notice period constitutes acceptance of the updated policy.
Contact
For privacy questions, data requests, or concerns, contact us at drue@avecvitesse.ca or through our Support page. We will respond within 30 days.
Related: Terms of Service · Cookie Policy