Updated July 13, 2026
Privacy Policy
We collect the minimum data needed to run a DECA practice platform, and we are explicit about who touches that data. This policy explains exactly what we store, why we store it, and your rights over it.
1. What we collect
We collect (a) your name and email via Google OAuth when you create an account; (b) practice test data, including the questions you attempt, your answers, scores, and roleplay submissions; (c) Stripe billing identifiers to manage subscriptions; (d) contact-form messages you send; and (e) limited technical error and request metadata used for security and reliability. We never see or store raw credit card details — Stripe handles payment information directly.
2. How we use it
We use your data to deliver the product: serve practice tests, score your responses, generate cluster-level analytics, and (for Pro members) generate leaderboards. We do not sell your data, and we do not use it for advertising.
3. Third-party processors
We rely on a small set of trusted vendors to operate the Service: Google OAuth for authentication, Stripe for billing, Neon (Postgres) for database storage, Vercel for hosting and analytics, Resend for email, Groq and optional Cerebras inference for question generation, coaching, and roleplay feedback. Prompts, answers, and roleplay submissions needed for those features are sent to the configured inference provider. Each processor receives data needed for its function and handles it under its own terms and privacy commitments.
4. Cookies and tracking
We use signed session and usage cookies, a consent-preference cookie, and analytics only after the analytics choice is accepted. We do not use advertising cookies.
5. Data retention
Practice-test records may be retained for up to three years and generation logs for up to thirteen months while an account remains active. Account deletion immediately disables the account and schedules associated account data for hard deletion after 30 days, except where longer retention is required for legal, fraud-prevention, or billing records.
6. Your rights
You can export your test data and delete your account at any time from your settings page. If you would like a copy of your data in a portable format, or want to correct inaccurate information, email maestro.committee@gmail.com and we will respond within 30 days.
7. Children's privacy
CompeteAI accounts are for users age 13 or older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 created an account, contact us so we can remove it.
8. Security
Data is encrypted in transit via TLS, and our infrastructure providers offer encryption at rest. Access to production systems is restricted. No system is perfectly secure; contact us if you believe your account or data may have been compromised.
9. Changes to this policy
We may update this policy as the Service evolves. Material changes will be announced in-product or via email at least 14 days before they take effect. The “Updated” date at the top of this page reflects the most recent revision.
10. Contact
Privacy questions or requests? Email maestro.committee@gmail.com.