Privacy Policy

Last updated: 2026-06

Overview

We ([Your legal name / company]) process personal data to operate Bestehn. This policy explains what we collect and why, under the GDPR.

Data we collect

Account (email, name), learning activity (exam attempts, progress), and payment data (handled by Stripe — we never store card details).

Processors

Supabase (auth + database), Vercel (hosting + cookieless, anonymous web analytics), Stripe (payments), Resend (email), OpenAI (AI grading/generation). Data may be processed outside the EU under appropriate safeguards.

Voice recordings

Speaking answers you record are sent for transcription and assessment, then the audio is discarded — we do not store your audio files. Only the text transcript, scores and feedback are kept in your account so you can review your progress.

Data retention

Account and learning data are kept while your account exists and deleted when you delete your account. Payment records are retained as long as tax law requires (7 years in Austria).

Your rights

Under the GDPR you can access, correct, export, restrict, object to, or delete your data (delete your account in Settings). You may also complain to a supervisory authority (in Austria: dsb.gv.at). Contact: support@bestehn.com.

Cookies

We use essential cookies for login and (with consent) analytics. You can manage consent at any time.