Who we are
CSE Reviewer is a Civil Service Exam mock examination platform. Our Data Protection Officer can be reached at privacy@example.com.
What we collect
Email, name, password (hashed by Supabase), exam attempts and answers, payment metadata (we never see card numbers), and basic browser fingerprint (UA + screen + timezone) for anti-cheat soft signals.
What we don't collect
Phone number. Address. Birthdate. Government IDs. Geolocation.
Your rights (RA 10173)
Access, correction, deletion, portability, objection. Use the in-app account-deletion form at /legal/data-deletion or email the DPO.
Retention
Account data: until you delete it. Payment records: 10 years (BIR requirement). Anonymized attempt aggregates: indefinitely.
Sub-processors
Supabase (database + auth, ap-southeast-1), Vercel (hosting, sin1/hnd1), PayMongo (payments), Sentry (error tracking, with PII scrubbed), Plausible (cookieless analytics).
Some of these providers store or process data outside the Philippines (Singapore, Tokyo, United States). We rely on standard contractual clauses and the providers' own DPA terms; under RA 10173 the same protections you have in the Philippines apply to these transfers. Email the DPO if you want a copy of the relevant terms.