Privacy Policy

Last updated: 2026-09-08

AI-CAT (the “Service”) is an AI competency assessment tool. By using the Service, you acknowledge that you have read and agree to this Policy. In case of any discrepancy between this English version and the Traditional Chinese version, the Chinese version prevails.

1. What we collect

• Account data: the email address, display name, avatar URL, and Google account identifier obtained when you sign in with Google.
• Assessment data: the messages you enter in the assessment sandbox, the AI assistant’s replies, and the scoring report and competency level generated after you submit.
• Usage data: the free-assessment count for each account.
• Technical data: the source IP address used for rate limiting, and server-side error logs.
• Local storage: your light/dark theme preference and sign-in state, stored in your browser’s localStorage; these are not transmitted anywhere beyond our servers.

2. How we use it

• To provide the assessment service and generate and display your competency report.
• To count and limit the free assessments for each account.
• To prevent abuse, maintain service stability, and control costs.

We do not sell or rent your personal data, and we do not use it for advertising or cross-site tracking.

3. Third-party processors

To provide the Service, data is processed by the following parties:

• Google: third-party sign-in (OAuth).
• Supabase: user authentication and database (accounts, reports, counts).
• Upstash (Redis): transient state during an assessment.
• OpenAI: the messages and conversation history you enter during an assessment are sent to OpenAI’s models to generate AI replies and scoring. Do not enter personal confidential information, trade secrets, or others’ private information into the conversation.
• Vercel: hosting and logging for the website and API.

4. Retention

• Transient conversation state during an assessment (Upstash) is deleted automatically after the session ends or is idle for about 1 hour.
• Scoring reports and account / personal data are retained until you delete your account or submit a deletion request.

5. Your rights

You may request access to, correction of, or deletion of the personal data and assessment records we hold about you. Email icguanyu@gmail.com and we will act within a reasonable period. You may also stop using the Service at any time and revoke the Service’s authorization in your Google account settings.

6. Data security

Data in transit is encrypted with HTTPS. Server-side keys are kept as environment variables, and high-privilege database keys are never exposed to the front end. However, no system can guarantee absolute security, and you understand and accept this risk.

Any attempt to access, crack, interfere with, or tamper with the Service without authorization, or to inject malicious code, is strictly prohibited. Offenders may bear civil liability and criminal responsibility, and the copyright holder reserves all rights to pursue legal action; see the Intellectual Property Notice, sections “Prohibited Conduct” and “Legal Liability and Reservation of Rights”.

7. Minors

The Service is not designed for children under 13. If you are below the age of consent under the laws of your jurisdiction, please use the Service with the consent of a guardian.

8. Changes to this Policy

We may revise this Policy from time to time and update the “Last updated” date on this page. Material changes will be announced on the website by reasonable means.

Intellectual Property Notice · Home