Privacy

Last updated: 12 June 2026.

What we collect

We collect the email address you use at checkout (via Lemon Squeezy) and at sign-in (via Supabase). We log download events so we can investigate access issues. We do not run third-party advertising trackers.

The test engine

The test engine stores your progress in your browser’s local storage only. Nothing is sent to our servers from the engine.

Processors

• Lemon Squeezy: payment processing, Merchant of Record.
• Supabase: authentication, database, file storage.
• BeeHiiv: email delivery for the welcome sequence and the lead-magnet list.
• Vercel: hosting.

Several of these processors are based outside the UK and may process personal data internationally. Where they do, the transfer relies on the UK International Data Transfer Addendum, the EU-US Data Privacy Framework, or equivalent safeguards under UK data protection law.

Your rights

To access or delete the data we hold against your email, write to privacy@infosecai.net.

The data controller

The CCA-F Programme is a trading style of InfoSecAI Limited, registered in England and Wales, company no. 16870376, registered office 10 Bintley Drive, Pocklington, York, YO42 2NU.

InfoSecAI Limited is registered with the UK Information Commissioner’s Office under reference ZC138138. You may also lodge a complaint with the ICO at ico.org.uk.