Privacy Policy
1. Privacy at a Glance
This privacy policy explains the nature, scope, and purpose of the processing of personal data on this website. The responsible entity is PMotion AI, Wildacker 41, 22523 Hamburg (contact@pm-career-os.de).
2. Hosting
This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Vercel may collect technical data such as IP address, browser type, and timestamp when accessing the site. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure website delivery). Details: https://vercel.com/legal/privacy-policy
3. Data We Collect
a) Account Data
When you register, we store your email address and a hashed password. This data is processed by Supabase Inc. (USA), which acts as our authentication and database provider. Legal basis: Art. 6(1)(b) GDPR (contract performance).
b) Exam Results
We store your exam results (score, mode, timestamp, per-question answers) to display your learning progress. This data is linked to your account and not visible to other users. Legal basis: Art. 6(1)(b) GDPR.
c) Payment Data
Payments are processed by Stripe Inc. (USA). We do not store credit card numbers or bank details. Stripe receives your payment data directly. We only store the Stripe session ID to associate your purchase. Legal basis: Art. 6(1)(b) GDPR. Details: https://stripe.com/privacy
4. Email Delivery
Transactional emails (registration confirmation, password reset) are sent via Resend Inc. (USA). Only email address and message content are transmitted. Legal basis: Art. 6(1)(b) GDPR.
5. Cookies
This website only uses technically necessary cookies for authentication (session cookie). No tracking or advertising cookies are set. Consent is therefore not required (Art. 6(1)(f) GDPR).
6. Your Rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Contact contact@pm-career-os.de for these requests. You also have the right to lodge a complaint with a supervisory authority.
7. Data Transfers to Third Countries
Some of our service providers (Vercel, Supabase, Stripe, Resend) are based in the USA. Data transfers are based on Standard Contractual Clauses (Art. 46(2)(c) GDPR) or the EU-US Data Privacy Framework.
8. Data Retention
Account data and exam results are stored for as long as your account exists. After account deletion, all personal data is deleted within 30 days, unless legal retention obligations apply.
9. Changes
We reserve the right to update this privacy policy as needed. The current version is always available on this page.
Last updated: April 2026