Privacy Policy

Banking Prep AI is the controller of personal data processed through the platform unless otherwise stated.

Privacy requests may be sent to support@bankingprepai.com.

We may collect name, email, login identifiers, language, market/region, phone number when provided, study preferences, target areas and banks, progress, answers, mocks, platform browsing history, usage events, technical logs, IP address, user agent, device data, cookies and similar technologies.

Authentication credentials, such as passwords, are processed by the authentication provider. We do not store passwords in plain text.

When payments apply, transaction data, plan, subscription status, currency, billing region and payment provider identifiers may be processed. We do not store full card numbers.

We process data to provide the service, authenticate users, personalize study, track progress, operate mocks and AI features, process payments, provide support, send communications, prevent fraud and abuse, protect intellectual property, improve the product and comply with legal obligations.

Legal bases may include performance of contract, legitimate interests, consent where applicable, and compliance with legal or regulatory obligations.

We use reasonable technical and organizational measures to protect data and platform integrity, including access controls, event logging, suspicious pattern monitoring, database security policies and specialized providers.

No system is fully risk-free. If a relevant incident occurs, we will take appropriate measures under applicable law.

We do not sell personal data. We may share data with providers needed for hosting, database, authentication, payments, analytics, email, AI, support, security, audit and legal compliance.

These providers may include platforms such as Supabase, Vercel, Stripe, analytics, email and AI providers, depending on the platform configuration actually used.

Some providers may process data outside Brazil or your country. In those cases, we seek to use providers with appropriate security and contractual safeguards.

We may use cookies, local storage and similar technologies to maintain sessions, save preferences, measure usage, improve performance, prevent fraud and operate essential features.

We retain data while your account is active or while needed for the purposes described. After a deletion request, we remove or anonymize data subject to technical, legal, tax, anti-fraud and security limits.

You may request confirmation of processing, access, correction, portability, anonymization, blocking or deletion, information about sharing, review of automated decisions where applicable, withdrawal of consent and objection to certain processing activities.

Where applicable, you may also petition the Brazilian National Data Protection Authority (ANPD).

Some requests may require identity verification and may be limited by legal obligations, trade secrets, fraud prevention or third-party rights.

We may update this Policy to reflect legal, technical or operational changes. For material changes, we may request renewed acceptance or communicate through appropriate channels.